Creating Reports, Dashboards and Visualizations →hardMultiple ChoiceObjective-mapped

SPLK-1001 Practice Question: Creating Reports, Dashboards and Visualizations

Exhibit

<form>
  <label>Example Dashboard</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="source" searchWhenChanged="true">
      <label>Source</label>
      <choice value="access_combined">Web Access</choice>
      <choice value="secure">Secure</choice>
    </input>
  </fieldset>
  <row>
    <panel>
      <chart>
        <search>
          <query>index=main sourcetype=$token$ | timechart count by host</query>
        </search>
      </chart>
    </panel>
  </row>
</form>

Refer to the exhibit. The dashboard panel is not displaying data when the input changes. What is the most likely cause?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The token name in the search is "$token$" but the input token is "source".

The most likely cause is a token name mismatch. The search uses $token$ but the input defines the token as 'source'. For the dashboard to update when the input changes, the token names in the search and the input must match exactly. Therefore, option D is correct. Option A is incorrect because searchWhenChanged='true' enables automatic search on input change, not prevents loading. Option B is incorrect because timechart uses _time by default and does not require an explicit time field. Option C is incorrect because a chart type is not required; it defaults to a column chart.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The input uses `searchWhenChanged="true"` which prevents dashboard loading.
Why it's wrong here
SearchWhenChanged='true' enables automatic search on input change, which should help update the panel, not prevent loading.
✗
The search uses `timechart` which requires a time field.
Why it's wrong here
Timechart uses _time by default as the x-axis, so it does not require an explicit time field to be specified.
✗
The chart type is not specified.
Why it's wrong here
If no chart type is specified, the dashboard defaults to a column chart, so this would not cause a data display issue.
✓
The token name in the search is "$token$" but the input token is "source".
Why this is correct
The token name in the search is $token$ but the input token is named 'source'. Token names must match exactly for the dashboard to respond to input changes.

Go deeper

SPLK-1001 Practice Question: Creating Reports, Dashboards and Visualizations

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question