Using the token within double quotes fixed the problem. Thank you @somesoni2! 🙂 ... View more

Hi @dfoster_splunk, do you have an update on this? Thanks in advance. ... View more

the token $Farm$ in the subsearch does not contain the selected value and so my subsearch is essentially running this: [|inputlookup append=t farm_consumer_grid|search GRID_FARM_NAME="" |return CLUSTER_NAME,CONSUMER_NAME] And this returns all values rather than specific values for CLUSTER_NAME and CONSUMER_NAME. The intention of the subsearch is to return this "CLUSTER_NAME=cluster_value CONSUMER_NAME=consumer_value" based on $Farm$ in a lookup table. ... View more

I have just posted it. Thanks in advance ... View more

Here is my code for dropdown and search: <input type="dropdown" token="Farm"> <label>Select Farm</label> <populatingSearch fieldForValue="GRID_FARM_NAME" fieldForLabel="FARM_NAME"> <![CDATA[ | inputlookup farm_consumer_grid ]]> </populatingSearch> </input> <row> <chart> <title>Consumer Demand vs Allocation</title> <searchString>sourcetype="Grid-Symphony:consumer_demand" [|inputlookup append=t farm_consumer_grid|search GRID_FARM_NAME=$Farm$ |return CLUSTER_NAME,CONSUMER_NAME] |timechart span=5min sum(USED) as Allocation, sum(MAX_REQUESTED) as Demand</searchString> <option name="charting.chart">line</option> <option name="charting.legend.placement">bottom</option> <option name="count">10</option> <option name="displayRowNumbers">true</option> </chart> ... View more