I guess the double quotes used for dropdown value is the problem. I corrected it and following work for me. <form> <label>Monitoring</label> <fieldset autoRun="false" submitButton="true"> <input type="time" searchWhenChanged="false"> <default> <earliestTime>-7d@h</earliestTime> <latestTime>now</latestTime> </default> </input> <input type="dropdown" token="server"> <label>Choose a Server Set:</label> <prefix>tag=</prefix> <choice value="Prod">Production</choice> <choice value="QA">QA</choice> <choice value="Dev2">Dev2</choice> </input> </fieldset> ... ... </form> ... View more

If you are planning to build a lot of cool dashboards, you can't go wrong by downloading the Splunk 6.x Dashboard Examples App This is an app full of great visual examples of what Splunk can do. (There is a version for Splunk 5.x as well.) Also, I think that everyone should have (and use) the SOS - Splunk on Splunk App There are many interesting and useful apps - most of them are free. If you download an app and it isn't useful, you can disable or delete it very easily. So I would try out anything that looks worthwhile. As you browse around, particularly in the "Cool Stuff" category, you will see apps that were really written to demonstrate a concept or to provide a starting point for creating your own apps. And of course you should download anything free that relates to data that you have in your environment (Palo Alto Networks, Cisco, F5, or whatever). Oops, I don't think that those are "less known!" You also can't go wrong by reading Carasso's book: Exploring Splunk ... View more