Dashboards & Visualizations

Empty string token causing multiselect box visual bug

Rolthers
Engager

I am using multiselect boxes to select which search results i want to exclude and include, and when the boxes are cleared, i have some javascript running that sets the tokens to empty strings so that the search can still run without waiting for the tokens to be set again.
However when the tokens are set to empty string by the javascript the multiselect box suddenly becoms twice as big without anything in it.
alt text
Hopefully this picture shows the problem, the empty x i can somewhat live with, but the box suddenly doubling in size is what i would like to avoid since it seems like a bug.
Here is the javascript i use to set to token to "" (empty string)
alt text
Mostly i just wanna avoid the Multiselect Box doubling in size, but alternate solutions to defaulting the tokens to empty values and still allowing the searches to run are also welcome.

0 Karma

jeffland
SplunkTrust
SplunkTrust

I'd suggest using something other than an empty string, maybe giving it a label saying "None" in the Input and a value that does nothing in the search. A value that does nothing in the search could be a comment makro saying "Empty Input Selection". This would not only solve the issue of your unnecessarily large multiselect, it would also be more transparent to both users of the dashboard and someone looking at the search.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...