Dashboards & Visualizations

SearchSelectLister : default value

LauraBre
Communicator

Hello,

I have two dropdowns. One is a dropdown where I am values of a field in static and the over in dynamic. I want to put a value default for the second dropdown but All doesn't work, when I open my view the second dropdown has the value
"choose an option above". Moreover I want that the search by default launch automatically when I open my view, how can do it?

Please by advance,

Laura


Requester
Requester


All



fr18126
fr18126


a187571
a187571


All

Requester

addterm

$target$

indexed


Users_setting
Select a user
source="tcp:5543" Users="" |top Users
True


All
*




Users
Users


All

Users_setting

addterm

$target$

indexed

Tags (2)
0 Karma

Lamar
Splunk Employee
Splunk Employee

Laura,
You could do this to have your search automatically initiate when you open the view.

<module name="HiddenSearch" autoRun="True">
  <param name="search">source="tcp:5543"</param>
  <module name="StaticSelect">
    <param name="settingToCreate">Requester</param>
    <param name="label">Requester</param>
    <param name="staticFieldsToDisplay">
      <list>
    <param name="label">All</param>
    <param name="value">*</param>
      </list>
      <list>
    <param name="label">fr18126</param>
    <param name="value">fr18126</param>
      </list>
      <list>
    <param name="label">a187571</param>
    <param name="value">a187571</param>
      </list>
    </param>

Lamar
Splunk Employee
Splunk Employee

Please make sure you accept this as your answer in the event someone else has an issue similar to yours. Thank you.

0 Karma

LauraBre
Communicator

Thx very much to your answer. The "autoRun=true" resolves my 2 problems.

0 Karma

Lamar
Splunk Employee
Splunk Employee

Also, make note that I've put a * in your value for your 'All" label in your StaticSelect so that when your search runs it will inject a * in your Requester value.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...