Document toolboxDocument toolbox

Select input

Data settings

This type of input creates a drop-down list with a limited number of possible values. Apart from the input ID, which needs to be used in the syntax inserted in the widget query to invoke the input values, you need to focus on the Data source. You need to configure this field to populate the input with a drop-down list of values that you can select.

With the Edit mode activated, click inside the data source field or click the Edit button. There are a couple of methods to populate the input:

Fixed set of values

You can configure the input to show a list of specific values by entering the following syntax in its data source:

["Value1", "Value2", "Value3", "Value4"]

Query results

You can configure the input to show a list of values that are the result of a query by entering one its data source:

from siem.logtrust.web.activity group by method

Visual settings

This type of input has several options for easier manipulation and enhanced interactivity. Keep in mind that they can be used in isolation or combined for an even more interactive approach.

Placeholder

Enter a placeholder text in case you want to show a sort of informational or instructional command when nothing is selected.

Disabled

Toggle on to block the input.

Searchable values

Toggle on to enable typing to search for the desired value. The options will be filtered as you type.

Allow multiple options

Toggle on to be able to select more than one option at the same time. When you enable this, you must click Apply after selecting your options.

Be aware that using this requires adjustments in the widget query (visit Case-specific adjustments).

Menu always open

Toggle on to keep the options menu always visible.

Selecting values in the input

After configuring the input settings and the widget query to invoke the input values, you just have to click inside the box to open the options menu and select a value. Keep in mind the visual settings selected for the input may vary this procedure (not clicking the box with Menu always open or applying your selection with Allow multiple options).

By default, you can only switch between the different values you have entered. To deselect a value and return to a neutral state, simply click on the drop-down list and hit the ESC key.

Widget data display

For a successful data display on the widget, you need to take into account the function of the values inside the widget query. This means that you need to introduce the values in the input as they would appear in the widget query and use the right operator in the widget query to invoke them. See the article Calling an input value from a widget for more information.

Let's say we are filtering by method in an area widget on an Activeboard to show the response time per method and we want to be able to easily change the argument of the filter operation with a set of options to select from. We can add a select input to the Activeboard (say the input's ID is Select0) and configure it with a fixed set of options that we can select.

  • Widget → The query that feeds the table widget should be:

    query (from siem.logtrust.web.activity where method = $(Select0.value))
  • Input → Configure the select input with the following syntax and select one option to show data on the widget:

    ["POST", "GET", "PUT", "DELETE"]

Â