I'd like to use a radio button or checkbox to alter a search
i.e. toggle between either
Index=$index$ host=$host$ source=$source$
or
Index=$index$ host=$host$ source=$source$ **NOT INFO**
I cannot find a simple way to do this, I find radio buttons will not uncheck, and leaving an option blank gets me an undefined search etc.
Is there a way to do this?
@raborder,
Try this example with radio button
- First option searches internal index for all log levels including INFO
- Second option searches internal index for all log levels excluding INFO
<form>
<label>Search Switch</label>
<fieldset submitButton="false">
<input type="radio" token="search_tok">
<label>Select the search</label>
<choice value="">Include INFO</choice>
<choice value="NOT "INFO"">Exclude INFO</choice>
<default></default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>index=_* $search_tok$|stats count by log_level</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
</form>
@raborder,
Try this example with radio button
- First option searches internal index for all log levels including INFO
- Second option searches internal index for all log levels excluding INFO
<form>
<label>Search Switch</label>
<fieldset submitButton="false">
<input type="radio" token="search_tok">
<label>Select the search</label>
<choice value="">Include INFO</choice>
<choice value="NOT "INFO"">Exclude INFO</choice>
<default></default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>index=_* $search_tok$|stats count by log_level</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
</form>
Awesome Renjith. This works as I want. I'll go over it and work out why my solution didn't 🙂