Splunk Search

How to select all checkboxes in a form input by default?

mclane1
Path Finder

Hello,

I would like to know how select by default all checkboxes in input like this:

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

I found that but, not friendly usage for client.

<input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
  <label>host filter</label>
  <search>
    <query>* myFilter...
      | stats by host 
      | table host 
      | sort host</query>
    <earliest>$time_tok.earliest$</earliest>
    <latest>$time_tok.latest$</latest>
  </search>
  <fieldForLabel>hosts</fieldForLabel>
  <fieldForValue>host</fieldForValue>
  <default>%</default>
  <choice value="%">All</choice>
  <prefix>(</prefix>
  <valuePrefix>LIKE(host,"</valuePrefix>
  <valueSuffix>")</valueSuffix>
  <delimiter> OR </delimiter>
  <suffix>)</suffix>
</input>

For this result :
alt text

0 Karma

cb_usps
Explorer

In it's simplest form, you use a comma separated list:

<input type="checkbox" token="field1">
  . . .
  <initialValue>a,b,c</initialValue>
</input>

In your case where you have a dynamically generated list, unless your host list does not change often, the only choice you have is to call the URL of the form with the checklist pre-populated, e.g.

I do this myself (with subsets of my entire host list), but I use multiselect instead of checkboxes - not sure if the URL syntax is the same or not. Here's how I build the URL dynamically:

<panel>
  <html>
    <div> <a href="your_dashboard_name?form.hosts=$hosts$" target="_blank">Name of URL in First Dashboard</a> </div>
  </html>
</panel>

The $hosts$ token in this code block is the token name of the multiselect in the first dashboard.

0 Karma

NOUMSSI
Builder

Hi;
Try this

 <input type="checkbox" token="hosts" searchWhenChanged="true" depends="somethig">
   <label>host filter</label>
   <search>
     <query>* myFilter...
       | stats by host 
       | table host 
       | sort host</query>
     <earliest>$time_tok.earliest$</earliest>
     <latest>$time_tok.latest$</latest>
   </search>
   <fieldForLabel>host</fieldForLabel>
   <fieldForValue>host</fieldForValue>
   <default></default>
   <choice value="*">All</choice>
   <prefix>(</prefix>
   <valuePrefix>host="</valuePrefix>
   <valueSuffix>")</valueSuffix>
   <delimiter> OR </delimiter>
   <suffix>)</suffix>
 </input>
0 Karma

mclane1
Path Finder

Hello,

Thanks for this post. I have seen this solution (my post) but not user friendly.
I don't want other checkbox, just all checkbox unknown checked.

Thanks

Not possible ? End user just would like to unckeck box.

0 Karma
Get Updates on the Splunk Community!

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...