topic Re: How to populate a dropdown using a search SPL query in Dashboard Studio? in Dashboards & Visualizations

How to populate a dropdown using a search SPL query in Dashboard Studio?

mihir_hardas — Thu, 19 May 2022 06:07:40 GMT

I need to create a simple dropdown and populate it using search query in Dashboard Studio.

We can do this in Dashboard classic but how to do it in Dashboard Studio.

Then once the user selects any option, how to pass the option to another search query. Like a token

Re: How to populate a dropdown using a search SPL query in Dashboard Studio?

VatsalJagani — Thu, 19 May 2022 06:36:07 GMT

@mihir_hardas - You can set dataSource to your inputs. And add a search as dataSource.

"inputs": { "input_RtgCL23i": { "options": { "items": ">frame(label, value) | prepend(formattedStatics) | objects()", "token": "user" }, "title": "Select user", "type": "input.dropdown", "dataSources": { "primary": "ds_eiFyjWZU" }, "context": { "formattedConfig": { "number": { "prefix": "" } }, "formattedStatics": ">statics | formatByType(formattedConfig)", "statics": [ [ "All" ], [ "*" ] ], "label": ">primary | seriesByName(\"user\") | renameSeries(\"label\") | formatByType(formattedConfig)", "value": ">primary | seriesByName(\"user\") | renameSeries(\"value\") | formatByType(formattedConfig)" } },

Examples picked from this page - https://docs.splunk.com/Documentation/Splunk/8.2.6/DashStudio/inputs#Example:_Search-based_cascading_inputs

there are other examples also there.

I hope this helps!!

Re: How to populate a dropdown using a search SPL query in Dashboard Studio?

mihir_hardas — Thu, 19 May 2022 13:37:22 GMT

Okay thanks and where to write the actual splunk query ?

Re: How to populate a dropdown using a search SPL query in Dashboard Studio?

VatsalJagani — Thu, 19 May 2022 13:44:49 GMT

Reference to create dataSource - https://docs.splunk.com/Documentation/Splunk/8.2.6/DashStudio/dsOpt