Re: dropdown via js search splunk

anissabnk · ‎07-08-2024

Hello,

I need your help for something.

I want to get a dropdown via using a result from a search with using js.

I want the dropdown to take the search result: index=_internal |stats count by source |table source

Thank you so much

kamlesh_vaghela · ‎07-09-2024

@anissabnk

Are you looking for this?

XML:

<dashboard version="1.1" script="dropdown_via_js.js">
  <label>Dropdown Via JS</label>
  <row>
    <panel>
      <html>
        <div id="mydropdownview"></div>
      </html>
    </panel>
  </row>
</dashboard>

JS:

require([
    "splunkjs/mvc/searchmanager",
    "splunkjs/mvc/dropdownview",
    "splunkjs/mvc/simplexml/ready!"
], function(SearchManager, DropdownView) {

    // Use this search to populate the dropdown with index values
    let my_search = new SearchManager({
        id: "example-search",
        search: "index=_internal |stats count by source |table source" 
    });

    // Instantiate components
    let my_dropdown = new DropdownView({
        id: "example-dropdown",
        managerid: "example-search",
        labelField: "source",
        valueField: "source",
        el: $("#mydropdownview")
    }).render();

});

I hope this will help you.

Thanks
KV
An upvote would be appreciated if any of my replies help you solve the problem or gain knowledge.

anissabnk · ‎07-09-2024

@kamlesh_vaghela, can you help me please ? 😉

anissabnk · ‎07-09-2024

No that's not it. I want my dropdown to be powered by a search but which will be defined in a js.

Something like this?

bowesmana · ‎07-08-2024

I'm not sure I understand the question - where is the JS coming from?

Are you saying you want to create a list of dropdown choices from the result of that search

If so, simply set your input to be

    <input type="dropdown" token="your_token" searchWhenChanged="true">
      <label>Example Dropdown from search</label>
      <fieldForLabel>source</fieldForLabel>
      <fieldForValue>source</fieldForValue>
      <search>
        <query>index=_internal |stats count by source</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
    </input>

dropdown via js search splunk

other

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?