<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Use Single Dropdown Choice to Display Mulitple Reports in a Single Row? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529021#M35910</link>
    <description>&lt;P&gt;I've figured out how to display a single Report in a row/panel based on a users dropdown choice&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;row&amp;gt;
&amp;lt;panel&amp;gt;
&amp;lt;title&amp;gt;Vuln Totals - Last 30 Days&amp;lt;/title&amp;gt;
&amp;lt;input type="dropdown" searchWhenChanged="true" token="field1"&amp;gt;
&amp;lt;label&amp;gt;Machine Classification&amp;lt;/label&amp;gt;
&amp;lt;choice value="WorkStation_Report_1"&amp;gt;Workstations&amp;lt;/choice&amp;gt;
&amp;lt;choice value="DataCenter_Report_1"&amp;gt;DataCenter&amp;lt;/choice&amp;gt;
&amp;lt;choice value="DMZ_Report_1"&amp;gt;DMZ&amp;lt;/choice&amp;gt;
&amp;lt;default&amp;gt;WorkStation_Report_1&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;chart&amp;gt;
&amp;lt;search ref="$field1$"&amp;gt;&amp;lt;/search&amp;gt;
&amp;lt;/chart&amp;gt;
&amp;lt;/panel&amp;gt;
&amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;However, I'd like to take the users choice/token and use it to display 3 Reports side by side (instead of just one).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;title&amp;gt;Top 5 Vulns&amp;lt;/title&amp;gt;
        &amp;lt;search ref="WorkStation_Report_1"&amp;gt;&amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;title&amp;gt;Top 5 IPs&amp;lt;/title&amp;gt;
        &amp;lt;search ref="WorkStation_Report_2"&amp;gt;&amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;title&amp;gt;Top 5 Overdue&amp;lt;/title&amp;gt;
        &amp;lt;search ref="WorkStation_Report_3"&amp;gt;&amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Does anyone know if this is possible or more importantly, how to achieve it?&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Dashboard_Multiple_Reports_Populated_By_Single_Dropdown_Choice_Displayed_In_SIngle_Row.PNG" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/11861i26AACA5572BE4900/image-size/large?v=v2&amp;amp;px=999" role="button" title="Dashboard_Multiple_Reports_Populated_By_Single_Dropdown_Choice_Displayed_In_SIngle_Row.PNG" alt="Dashboard_Multiple_Reports_Populated_By_Single_Dropdown_Choice_Displayed_In_SIngle_Row.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 11 Nov 2020 19:14:03 GMT</pubDate>
    <dc:creator>dfutrick</dc:creator>
    <dc:date>2020-11-11T19:14:03Z</dc:date>
    <item>
      <title>Use Single Dropdown Choice to Display Mulitple Reports in a Single Row?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529021#M35910</link>
      <description>&lt;P&gt;I've figured out how to display a single Report in a row/panel based on a users dropdown choice&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;row&amp;gt;
&amp;lt;panel&amp;gt;
&amp;lt;title&amp;gt;Vuln Totals - Last 30 Days&amp;lt;/title&amp;gt;
&amp;lt;input type="dropdown" searchWhenChanged="true" token="field1"&amp;gt;
&amp;lt;label&amp;gt;Machine Classification&amp;lt;/label&amp;gt;
&amp;lt;choice value="WorkStation_Report_1"&amp;gt;Workstations&amp;lt;/choice&amp;gt;
&amp;lt;choice value="DataCenter_Report_1"&amp;gt;DataCenter&amp;lt;/choice&amp;gt;
&amp;lt;choice value="DMZ_Report_1"&amp;gt;DMZ&amp;lt;/choice&amp;gt;
&amp;lt;default&amp;gt;WorkStation_Report_1&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;chart&amp;gt;
&amp;lt;search ref="$field1$"&amp;gt;&amp;lt;/search&amp;gt;
&amp;lt;/chart&amp;gt;
&amp;lt;/panel&amp;gt;
&amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;BR /&gt;However, I'd like to take the users choice/token and use it to display 3 Reports side by side (instead of just one).&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;title&amp;gt;Top 5 Vulns&amp;lt;/title&amp;gt;
        &amp;lt;search ref="WorkStation_Report_1"&amp;gt;&amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;title&amp;gt;Top 5 IPs&amp;lt;/title&amp;gt;
        &amp;lt;search ref="WorkStation_Report_2"&amp;gt;&amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;title&amp;gt;Top 5 Overdue&amp;lt;/title&amp;gt;
        &amp;lt;search ref="WorkStation_Report_3"&amp;gt;&amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Does anyone know if this is possible or more importantly, how to achieve it?&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Dashboard_Multiple_Reports_Populated_By_Single_Dropdown_Choice_Displayed_In_SIngle_Row.PNG" style="width: 999px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/11861i26AACA5572BE4900/image-size/large?v=v2&amp;amp;px=999" role="button" title="Dashboard_Multiple_Reports_Populated_By_Single_Dropdown_Choice_Displayed_In_SIngle_Row.PNG" alt="Dashboard_Multiple_Reports_Populated_By_Single_Dropdown_Choice_Displayed_In_SIngle_Row.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 11 Nov 2020 19:14:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529021#M35910</guid>
      <dc:creator>dfutrick</dc:creator>
      <dc:date>2020-11-11T19:14:03Z</dc:date>
    </item>
    <item>
      <title>Re: Use Single Dropdown Choice to Display Mulitple Reports in a Single Row?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529042#M35912</link>
      <description>&lt;P&gt;The code you have (3 &lt;FONT face="courier new,courier"&gt;&amp;lt;panel&amp;gt;&lt;/FONT&gt; elements within a &lt;FONT face="courier new,courier"&gt;&amp;lt;row&amp;gt;&lt;/FONT&gt; element) should work.&amp;nbsp; Have you tried it?&amp;nbsp; What were the results?&lt;/P&gt;</description>
      <pubDate>Wed, 11 Nov 2020 21:13:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529042#M35912</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2020-11-11T21:13:14Z</dc:date>
    </item>
    <item>
      <title>Re: Use Single Dropdown Choice to Display Mulitple Reports in a Single Row?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529050#M35913</link>
      <description>&lt;P&gt;As stand-alone code it worked but what I was trying to do was to get the 3 reports to change based on the choice made in the dropdown.&amp;nbsp; In fact, I just figured out that part right before I saw your post.&lt;BR /&gt;&lt;BR /&gt;The solution I landed on is this. I'll use a different prefix for each report type, define that prefix as my "choice value=", and then call that out in the search tag within each table, and append it to the 3 report names.&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This code achieves what I was trying to do.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;row&amp;gt;
&amp;lt;panel&amp;gt;
&amp;lt;title&amp;gt;Top Fives - Last 7 Days&amp;lt;/title&amp;gt;
&amp;lt;input type="dropdown" searchWhenChanged="true" token="field1"&amp;gt;
&amp;lt;label&amp;gt;Machine Classification&amp;lt;/label&amp;gt;
&amp;lt;choice value="CYB_Test"&amp;gt;Workstations&amp;lt;/choice&amp;gt;
&amp;lt;choice value="DC_Test"&amp;gt;DataCenter_All&amp;lt;/choice&amp;gt;
&amp;lt;/input&amp;gt;
&amp;lt;/panel&amp;gt;
&amp;lt;/row&amp;gt;
&amp;lt;row&amp;gt;
&amp;lt;panel&amp;gt;
&amp;lt;table&amp;gt;
&amp;lt;title&amp;gt;Table 1&amp;lt;/title&amp;gt;
&amp;lt;search ref="$field1$_1"&amp;gt;&amp;lt;/search&amp;gt;
&amp;lt;/table&amp;gt;
&amp;lt;/panel&amp;gt;
&amp;lt;panel&amp;gt;
&amp;lt;table&amp;gt;
&amp;lt;title&amp;gt;Table 2&amp;lt;/title&amp;gt;
&amp;lt;search ref="$field1$_2"&amp;gt;&amp;lt;/search&amp;gt;
&amp;lt;/table&amp;gt;
&amp;lt;/panel&amp;gt;
&amp;lt;panel&amp;gt;
&amp;lt;table&amp;gt;
&amp;lt;title&amp;gt;Table 3&amp;lt;/title&amp;gt;
&amp;lt;search ref="$field1$_3"&amp;gt;&amp;lt;/search&amp;gt;
&amp;lt;/table&amp;gt;
&amp;lt;/panel&amp;gt;
&amp;lt;/row&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 11 Nov 2020 22:01:11 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Use-Single-Dropdown-Choice-to-Display-Mulitple-Reports-in-a/m-p/529050#M35913</guid>
      <dc:creator>dfutrick</dc:creator>
      <dc:date>2020-11-11T22:01:11Z</dc:date>
    </item>
  </channel>
</rss>

