<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: variable field name with variable field value in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556708#M38705</link>
    <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/235678"&gt;@truckturner&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Can you please share more details about your expectations from your given example?&lt;/P&gt;&lt;P&gt;KV&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 22 Jun 2021 14:28:54 GMT</pubDate>
    <dc:creator>kamlesh_vaghela</dc:creator>
    <dc:date>2021-06-22T14:28:54Z</dc:date>
    <item>
      <title>variable field name with variable field value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556704#M38704</link>
      <description>&lt;P&gt;I am trying to make a drop down dependent on another dropdown. However my field name has a variable in it as well as the field value.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;Example:&amp;nbsp;&lt;/P&gt;&lt;P&gt;experiments__12345=CONTROL&lt;SPAN&gt;&amp;nbsp;&lt;BR /&gt;experiments__56752=test-1&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;experiments__12345=control&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Jun 2021 14:20:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556704#M38704</guid>
      <dc:creator>truckturner</dc:creator>
      <dc:date>2021-06-22T14:20:58Z</dc:date>
    </item>
    <item>
      <title>Re: variable field name with variable field value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556708#M38705</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/235678"&gt;@truckturner&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Can you please share more details about your expectations from your given example?&lt;/P&gt;&lt;P&gt;KV&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Jun 2021 14:28:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556708#M38705</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2021-06-22T14:28:54Z</dc:date>
    </item>
    <item>
      <title>Re: variable field name with variable field value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556709#M38706</link>
      <description>&lt;P&gt;I have two dropdowns one which lists the name of the experiment in this form : experiment.12345&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have that dropdown configured and now I need the second one to display the field experiment__12345= values as it's options.&amp;nbsp;&lt;/P&gt;&lt;P&gt;The problem I can't figure out is how to make the second DD react when the experiment.12345 is selected.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Does that help?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 22 Jun 2021 14:35:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556709#M38706</guid>
      <dc:creator>truckturner</dc:creator>
      <dc:date>2021-06-22T14:35:02Z</dc:date>
    </item>
    <item>
      <title>Re: variable field name with variable field value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556718#M38708</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/235678"&gt;@truckturner&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Can you please try this? Just check dropdowns.&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Dependent Drop Down&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;input type="dropdown" token="field1"&amp;gt;
      &amp;lt;label&amp;gt;field1&amp;lt;/label&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;value&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;value&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| makeresults | eval value="experiment.12345"&amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;change&amp;gt;
        &amp;lt;eval token="selected_val"&amp;gt;replace(value,"\\.","__")&amp;lt;/eval&amp;gt;
      &amp;lt;/change&amp;gt;
    &amp;lt;/input&amp;gt;
    &amp;lt;input type="dropdown" token="field2"&amp;gt;
      &amp;lt;label&amp;gt;field2&amp;lt;/label&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;value&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;value&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;| makeresults | eval _raw="value
experiment__12342
experiment__12343
experiment__12345
experiment__12344
experiment__12346
"| multikv forceheader=1
| table value | search value="$selected_val$"&amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks&lt;BR /&gt;KV&lt;BR /&gt;▄︻̷̿┻̿═━一&lt;BR /&gt;&lt;BR /&gt;If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.&lt;/P&gt;</description>
      <pubDate>Tue, 22 Jun 2021 15:28:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/variable-field-name-with-variable-field-value/m-p/556718#M38708</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2021-06-22T15:28:32Z</dc:date>
    </item>
  </channel>
</rss>

