Splunk Search

populatingSearch not working -- Search works as standalone search

neiljpeterson
Communicator

Very simple search string which works fine in free search. Similar searches like this work fine for other fields. The fields do not populate. The search is definitely completing, I even tried to limit it to a shorter time with to no effect.

What am I missing here?

   <form>
      <label>Server Selector</label>
      <description>Displaying all active application servers with logged events going back 30 days</description>
      <!-- Do not need a Search Button. Inputs search when changed -->
      <fieldset autoRun="true" submitButton="false">
        <!-- Specify search when changed for the inputs -->
        <input type="radio" token="app_server" searchWhenChanged="true">
          <label>Select a Server:</label>
          <choice value="something">something</choice>
          <populatingSearch fieldForValue="app_server" fieldForLabel="app_server" earliest="-30d" latest="now">
            <![CDATA[host=* | stats dc(host) by host]]>
          </populatingSearch>
        </input>
      </fieldset>
    </form>
Tags (2)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Your search yields two fields, host and dc(host). However, your radio input is looking for a field called app_server.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

Your search yields two fields, host and dc(host). However, your radio input is looking for a field called app_server.

neiljpeterson
Communicator

Doh! Thank you. Works perfectly now!

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials

Welcome to the "Splunk Classroom Chronicles" series, created to help curious, career-minded learners get ...

Access Tokens Page - New & Improved

Splunk Observability Cloud recently launched an improved design for the access tokens page for better ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

&#x1f342; Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...