Hello,
I have a form, built like this:
1. A few inputs - time selector and some dropdowns. The tokens set by them affect the searches in the subsequent items.
2. A timechart with selection capability (
<select> tag in the Simple XML), setting some tokens to be used as **earliest** and **latest** in the table below.
3. A table with search string using the tokens from the input elements in section 1 and the time tokens from the timechart selection.
Here is the sequence of steps to reproduce the problem I encounter:
1. Make a selection in the timechart - the table below is repopulated
2. Use one of the dropdown inputs to change the search tokens without resetting the selection (there is a 'Reset' button on the right while selection is active)
At this point the selection disappears, the timechart is properly recalculated - but the data table below is still populated with the **earliest** and **latest** from the previously active selection. Moreover, I no longer can make any selection in the timechart - it behaves as though the drilldown has been completely disabled.
This happens in Splunk 6.3, more specifically Splunk 6.3.1 (build f3e41e4b37b2).
Has anyone encountered this issue?