i have this dropdown which produces correct results:
<input type="dropdown" token="tUser" searchWhenChanged="true">
<label>User Name</label>
<choice value="*">All<...
See more...
i have this dropdown which produces correct results:
<input type="dropdown" token="tUser" searchWhenChanged="true">
<label>User Name</label>
<choice value="*">All</choice>
<default>*</default>
<fieldForLabel>numUsername</fieldForLabel>
<fieldForValue>username</fieldForValue>
<search>
<query>index=tvlog
| stats count AS "Quantity" by username
| strcat username " (" Quantity ")" numUsername
</query>
<earliest>$tokEarliestTime$</earliest>
<latest>$tokLatestTime$</latest>
</search>
</input>
there's, among other's, one user named "Support Sul" and an additional user named "Support SuL 2". both show up in the dropdown with the correct number of connections (Quantity). BUT when i select "Support SuL" from the dropdown, the resulting table contains both users. even worse: when i select "Support SuL 2", i get all "Support SuL 2" users and some "Support SuL" users. this is the table:
<table>
<search>
<query>index=tvlog $tUser$
| table start_date, end_date, duration, username, devicename
| sort start_date desc
| rename start_date as "Start Date"
| rename end_date as "End Date"
| rename username as "User Name"
| rename devicename as "Device Name"
</query>
<earliest>$tokEarliestTime$</earliest>
<latest>$tokLatestTime$</latest>
</search>
<option name="count">20</option>
<option name="drilldown">none</option>
</table>
the source file is a simple utf-8 encoded csv.
what's wrong here?