sample: <form>
<label>double dropdown</label>
<fieldset submitButton="false">
<input type="dropdown" token="dropdown_token">
<label>dropdown1</label>
<fieldForLabel>label</fieldForLabel>
<fieldForValue>sourcetype</fieldForValue>
<search>
<query>| tstats count where index=_internal by sourcetype
| table sourcetype
| eval label=sourcetype</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
</input>
<input type="dropdown" token="field1">
<label>dropdown2</label>
<fieldForLabel>label</fieldForLabel>
<fieldForValue>sourcetype</fieldForValue>
<search>
<query>| tstats count where index=_internal by sourcetype
| table sourcetype
| eval label=sourcetype</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
</input>
<input type="time" token="field3">
<label></label>
<default>
<earliest>-24h@h</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<event>
<search>
<query>index=_internal sourcetype=$dropdown_token$ OR sourcetype=$field1$ | head 100</query>
<earliest>0</earliest>
<latest></latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="type">list</option>
</event>
</panel>
</row>
</form> your simpleXML is something wrong.
... View more
