Hello, I'm looking to force a dropdown to revert to its first choice using JS. I already have a dropdown on my dashboard with id dropdown , but I don't know how to select it and set the selectFirstChoice property with JS. I've found examples that show how to create a new dropdown input, but in my case I have an existing one and I'm just trying to set selectFirstChoice to true . Is it possible to do this? Thanks! Andrew ... View more

Hello, My objective is to clean three distinct substrings from a comma delimited string. Those substrings may all be present in the string, may not all be present in the string, or may not be present at all in the string. Their positions within the string can vary as well. Assuming values substring1 , substring2 , and substring3 , here are some examples: this,is,substring1,a,sentence,with,one substring2,this,has,substring1,all,three,substring3 here,there,are,no,substrings this,only,substring3,substring1,has,two Ideally I would like to encorporate the logic within a data model, which limits me to eval or rex ( replace isn't possible). So far I can do it with rex mode=sed but I can't add it to a data model. Here is a run anywhere with my sed solution: | makeresults | eval string="this,is,substring1,a,sentence,with,one" | append [ | makeresults | eval string="substring2,this,has,substring1,all,three,substring3" ] | append [ | makeresults | eval string="here,there,are,no,substrings" ] | append [ | makeresults | eval string="this,only,substring3,substring1,has,two" ] | table string | rex mode=sed field=string "s/$/,/g" | rex mode=sed field=string "s/substring1,//g" | rex mode=sed field=string "s/substring2,//g" | rex mode=sed field=string "s/substring3,//g" | rex mode=sed field=string "s/.$//g" The first and last sed commands are to add a comma to the end of the string to manage the case where a substring is positioned at the end, and to remove it again to clean up afterwards. Are there any better solutions? Thanks in advance, and best regards, Andrew ... View more

Hello, I'm trying to use the tstats command within a data model on a data set that has children and grandchildren. Ideally I'd like to be able to use tstats on both the children and grandchildren (in separate searches), but for this post I'd like to focus on the children. Let's say my structure is the following: data_model --parent_ds ----child_ds And let's say we have _time , id , dimension , status , and error as fields. Assuming that parentds has no filter on the dimension field, childds will have an additional constraint for a specific value of dimension . I am able to use the tstats command to extract the values from parent_ds with the following search: | tstats latest(_time) as _time values(parent_ds.status) as status values(parent_ds.error) as error FROM datamodel=data_model.parent_ds BY parent_ds.id Since I would like to run this same search on child_ds I tried the following: | tstats latest(_time) as _time values(child_ds.status) as status values(child_ds.error) as error FROM datamodel=data_model.child_ds BY child_ds.id When doing this I get the following error: Error in 'DataModelCache': Invalid or unaccelerable root object for datamodel I've also tried nesting by specifying parent_ds.child_ds.<field> but that doesn't work either. Is it possible to accomplish what I'm trying to do? If so, could somebody point me in the right direction? Thank you and best regards, Andrew ... View more

Hello, I've seen similar questions like this one, but not exactly what I'm looking for. I've managed to create buckets in the chart where those buckets don't have values, but what I'd like to do is add the zero label as well (the "Show Data Values" option). Here is an image showing what I mean: Is this possible? Is there some CSS code that will allow me to do it? Thanks! Andrew ... View more

Hello, I have a custom command, let's call it customcommand . This command takes two parameters, parameter1 and parameter2 . parameter1 should be a fixed value, fixedvalue , while parameter2 comes from a field in the search. In order to get the custom command working, I am currently using an eval before the custom command to fix the value for parameter1 . It looks like this: ... | eval parameter1 = "fixedvalue" | customcommand parameter1 parameter2 ... Is there a way of setting parameter1 directly in the customcommand call? Something like: | customcommand parameter1="fixedvalue" parameter2 I added supports_rawargs = true to my commands.conf , but it doesn't seem to resolve. Can somebody point me in the right direction? Thanks! Andrew ... View more