<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to change search based on Dropdown? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601654#M49410</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246173"&gt;@phwork&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;let me understand: you have a lookup containing two columns:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;search_title&lt;/LI&gt;&lt;LI&gt;search_code&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;you want to create a dropdown, populated with this lookup, and run the search choosed in the dropdown, is this correct?&lt;/P&gt;&lt;P&gt;Why do you say that "&lt;SPAN&gt;$token$ will not be enough."?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;you could run something like this:&lt;/SPAN&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Test&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;input type="dropdown" token="dropdown"&amp;gt;
      &amp;lt;label&amp;gt;Dropdown&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
           | inputlookup command_lookup.csv
           | sort search_title
           | table search_title search
        &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;search_title&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;search&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Test&amp;lt;/title&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;$dropdown$&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;30&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
    <pubDate>Tue, 14 Jun 2022 06:39:53 GMT</pubDate>
    <dc:creator>gcusello</dc:creator>
    <dc:date>2022-06-14T06:39:53Z</dc:date>
    <item>
      <title>How to change search based on Dropdown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601609#M49408</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;
&lt;P&gt;I am trying to use a drop-down to run a search based on whats selected currently (in the drop-down) in Dashboard Studio&lt;/P&gt;
&lt;P&gt;Here is what I have so far :&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;A drop-down that's populated by an input lookup table.&lt;/LI&gt;
&lt;LI&gt;There are 4 distinct searches.&lt;/LI&gt;
&lt;LI&gt;Every time an item is selected in the drop-down the associated search needs to run and the data displayed needs to change.&lt;/LI&gt;
&lt;LI&gt;The searches are very different from one another so passing a value in a $token$ will not be enough.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;What can I do to show data in the form of a table based on the item selected in the drop-down ?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 13 Jun 2022 20:52:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601609#M49408</guid>
      <dc:creator>phwork</dc:creator>
      <dc:date>2022-06-13T20:52:35Z</dc:date>
    </item>
    <item>
      <title>Re: How to change search based on Dropdown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601654#M49410</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246173"&gt;@phwork&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;let me understand: you have a lookup containing two columns:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;search_title&lt;/LI&gt;&lt;LI&gt;search_code&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;you want to create a dropdown, populated with this lookup, and run the search choosed in the dropdown, is this correct?&lt;/P&gt;&lt;P&gt;Why do you say that "&lt;SPAN&gt;$token$ will not be enough."?&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN&gt;you could run something like this:&lt;/SPAN&gt;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Test&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;input type="dropdown" token="dropdown"&amp;gt;
      &amp;lt;label&amp;gt;Dropdown&amp;lt;/label&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
           | inputlookup command_lookup.csv
           | sort search_title
           | table search_title search
        &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;search_title&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;search&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;Test&amp;lt;/title&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;$dropdown$&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;30&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 14 Jun 2022 06:39:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601654#M49410</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-06-14T06:39:53Z</dc:date>
    </item>
    <item>
      <title>Re: How to change search based on Dropdown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601728#M49414</link>
      <description>&lt;P&gt;Hi Giuseppe,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you for your reply.&lt;/P&gt;&lt;P&gt;I have a drop-down with 4 items. Each of the items has a different search associated with it. Based on what is picked in the drop-down,&amp;nbsp; a search&amp;nbsp; needs to run and display data in a a table. Also, this is in Dashboard Studio.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 14 Jun 2022 12:27:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601728#M49414</guid>
      <dc:creator>phwork</dc:creator>
      <dc:date>2022-06-14T12:27:47Z</dc:date>
    </item>
    <item>
      <title>Re: How to change search based on Dropdown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601730#M49416</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/246173"&gt;@phwork&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;now I'm prefering to wait to use Dashboard Studio until it will have all the features of Dashboard Classic!&lt;/P&gt;&lt;P&gt;Anyway, the approach I hintd is correct and runs on Classic Dashboards, try to apply to Dashboard Studio, it should run in the same way.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 14 Jun 2022 12:32:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-change-search-based-on-Dropdown/m-p/601730#M49416</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-06-14T12:32:23Z</dc:date>
    </item>
  </channel>
</rss>

