Building Advanced Dashboards - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 233

Start a search to populate the user dropdown. This query will find all users in the
last 24 hours:
<module name="Search" layoutPanel="panel_row1_col1">
<param name="search">
source="impl_splunk_gen" user user="*"
| top user
</param>
<param name="earliest">-24h</param>
<param name="latest">now</param>
Using a query to populate a dropdown can be very expensive,
particularly as your data volumes increase. You may need to
precalculate these values, either storing the values in a CSV using
outputcsv and inputcsv , or using a summary index. See Chapter
9 , Summary Indexes and CSV Files , for examples of summary indexing
and using CSV files for transient data.
This module draws the user selector. The menu is filled by the Search module
previously, but notice that the value selected is from our URL value:
<module name="Pulldown">
<!-- use valueField in SideView 2.0 -->
<param name="searchFieldsToDisplay">
<list>
<param name="value">user</param>
<param name="label">user</param>
</list>
</param>
<param name="name">user</param>
<param name="label">User</param>
<param name="float">left</param>
Next is a text field for our logger. This is a Sideview version of
ExtendedFieldSearch . It will prepopulate using upstream variables:
<module name="TextField">
<param name="name">logger</param>
<param name="default">*</param>
<param name="label">Logger:</param>
<param name="float">left</param>