Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Pulldown doesn't work the first time (With a trivial Example!)

$
0
0
Hello, I have a really simple dashboard with a single pulldown. I notice that it never seems to take effect the first time I select a value. Only the second time. Here is the code with a base search and a simple table panel over the past hour. If I load this in Splunk (6.5.2) and run it I will see the dropdown populated. If I choose one sourcetype, it will immediately update the pulldown options but NOT update the table results. If I reset and chose another sourcetype it then takes effect. Hypothesis, this is because of a base search and filtering search for the dropdowns? I'd like for it to work the first time without requiring a Submit button. Note: I tried setting the option searchWhenChanged - but it didn't help. (searchWhenChanged="true")
index =_internal earliest=-1h| fields sourcetype
All SourceTypes*sourcetypesourcetypesearch sourcetype="*$sourcetype$*" | dedup sourcetype | sort sourcetype
search sourcetype="*$sourcetype$*" | head

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>