topic Re: How to add filter specific to each column in SPLUNK dashboard in Dashboards & Visualizations

How to add filter specific to each column in SPLUNK dashboard

nandkumar90 — Sat, 13 May 2017 10:23:00 GMT

I am creating a Dashboard from Splunk log

In this dashboard, I want to want to add the filter to each column. Just by writing into filter text box, data need to be filtered. something like this.

I have also asked same question on stackoverflow.
https://stackoverflow.com/questions/43934866/how-to-add-filter-specific-to-each-column-in-splunk-dashboard![alt text]1

Re: How to add filter specific to each column in SPLUNK dashboard

amielke — Tue, 29 Sep 2020 14:03:59 GMT

Save the search of the reports as dashboard panel
edit the dashboard
add a input
in the config of the Input rename the token to filter1_tok or a name_abc_tok or..._tok
connect the Input with the Visualization: Button "magnifying glass" edit search --> time range score --> select your token ".._tok"
finish

Look here too:
http://docs.splunk.com/Documentation/Splunk/6.6.0/Viz/Aboutthismanual

Re: How to add filter specific to each column in SPLUNK dashboard

amielke — Sat, 13 May 2017 12:25:56 GMT

input at a dashboard are equal filter 😉

Re: How to add filter specific to each column in SPLUNK dashboard

woodcock — Sat, 13 May 2017 23:27:08 GMT

Like this:

| multisearch
    [ |makeresults | eval _time = "   Search Time", message = "   Search Message" ]
    [ YOUR ORIGINAL SEARCH HERE ]

If you need it to be tokenized, then like this:

| multisearch
    [ |makeresults | eval _time = "   " . $time_token$, message = "   " . $message_token$ ]
    [ YOUR ORIGINAL SEARCH HERE ]