<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dashboards showing csv files in dropdown input in Other Usage</title>
    <link>https://community.splunk.com/t5/Other-Usage/Why-is-Dashboards-showing-csv-files-in-dropdown-input/m-p/655901#M686</link>
    <description>&lt;P&gt;Sure you can do that - you can either populate the dropdown with static options with the month name and add the .csv on the end for the value, e.g.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="dropdown" token="month"&amp;gt;
      &amp;lt;label&amp;gt;Month&amp;lt;/label&amp;gt;
      &amp;lt;choice value="july"&amp;gt;July&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="august"&amp;gt;August&amp;lt;/choice&amp;gt;
... more choices
    &amp;lt;/input&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;then your search is&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| inputlookup $month$.csv ...&lt;/LI-CODE&gt;&lt;P&gt;or you could make your lookup dynamic and look for lookups that match a pattern, e.g.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="dropdown" token="month"&amp;gt;
      &amp;lt;label&amp;gt;Month&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
| rest splunk_server=local /servicesNS/-/-/data/lookup-table-files 
| where 'eai:acl.app'="your_app_name"
| fields title
| where match(title, "^(january|february|march|april|may|june|july|august|september|october|november|december).csv$")
| eval month=replace(title, "\.csv", ""), month=upper(substr(month, 1,1)).substr(month, 2)
        &amp;lt;/query&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;month&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;title&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;

 &lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 28 Aug 2023 23:19:14 GMT</pubDate>
    <dc:creator>bowesmana</dc:creator>
    <dc:date>2023-08-28T23:19:14Z</dc:date>
    <item>
      <title>Why is Dashboards showing csv files in dropdown input?</title>
      <link>https://community.splunk.com/t5/Other-Usage/Why-is-Dashboards-showing-csv-files-in-dropdown-input/m-p/655891#M685</link>
      <description>&lt;DIV class=""&gt;
&lt;DIV class=""&gt;
&lt;P&gt;Good afternoon,&lt;/P&gt;
&lt;P&gt;I am trying to show information from a csv which is static, but will be replaced as time goes on I awas wondering there was a way to make the CSV filenames a dropdown option in an input which would correlate in the searches below in the dashboard.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;For example&lt;/P&gt;
&lt;P&gt;Input dropdown values:&lt;/P&gt;
&lt;P&gt;july.csv&lt;/P&gt;
&lt;P&gt;august.csv&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;And the search would be&lt;/P&gt;
&lt;P&gt;| inputlookup $august.csv$ ...&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Is this an option or is there a better way to do this?&lt;/P&gt;
&lt;/DIV&gt;
&lt;/DIV&gt;</description>
      <pubDate>Wed, 30 Aug 2023 16:11:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Other-Usage/Why-is-Dashboards-showing-csv-files-in-dropdown-input/m-p/655891#M685</guid>
      <dc:creator>splunk_user4</dc:creator>
      <dc:date>2023-08-30T16:11:24Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboards showing csv files in dropdown input</title>
      <link>https://community.splunk.com/t5/Other-Usage/Why-is-Dashboards-showing-csv-files-in-dropdown-input/m-p/655901#M686</link>
      <description>&lt;P&gt;Sure you can do that - you can either populate the dropdown with static options with the month name and add the .csv on the end for the value, e.g.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="dropdown" token="month"&amp;gt;
      &amp;lt;label&amp;gt;Month&amp;lt;/label&amp;gt;
      &amp;lt;choice value="july"&amp;gt;July&amp;lt;/choice&amp;gt;
      &amp;lt;choice value="august"&amp;gt;August&amp;lt;/choice&amp;gt;
... more choices
    &amp;lt;/input&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;then your search is&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| inputlookup $month$.csv ...&lt;/LI-CODE&gt;&lt;P&gt;or you could make your lookup dynamic and look for lookups that match a pattern, e.g.&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="dropdown" token="month"&amp;gt;
      &amp;lt;label&amp;gt;Month&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
| rest splunk_server=local /servicesNS/-/-/data/lookup-table-files 
| where 'eai:acl.app'="your_app_name"
| fields title
| where match(title, "^(january|february|march|april|may|june|july|august|september|october|november|december).csv$")
| eval month=replace(title, "\.csv", ""), month=upper(substr(month, 1,1)).substr(month, 2)
        &amp;lt;/query&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;month&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;title&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;

 &lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 28 Aug 2023 23:19:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Other-Usage/Why-is-Dashboards-showing-csv-files-in-dropdown-input/m-p/655901#M686</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2023-08-28T23:19:14Z</dc:date>
    </item>
  </channel>
</rss>

