<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to add option &amp;quot;Select All&amp;quot; in a drilldown? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615322#M50485</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/245583"&gt;@Julia1231&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;yes, it's possible: you have to add a static option, adding All as label and * as value.&lt;/P&gt;&lt;P&gt;Then, if you like, you can set this value as default for your dropdown.&lt;/P&gt;&lt;P&gt;Something like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="dropdown" token="Status"&amp;gt;
      &amp;lt;label&amp;gt;idopen_cases&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;prefix&amp;gt;idopen_cases="&amp;lt;/prefix&amp;gt;
      &amp;lt;suffix&amp;gt;"&amp;lt;/suffix&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;idopen_cases&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;idopen_cases&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
          | inputlookup lookup.csv
          | dedup idopen_cases
          | sort idopen_cases
          | table idopen_cases
        &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
    <pubDate>Fri, 30 Sep 2022 07:57:42 GMT</pubDate>
    <dc:creator>gcusello</dc:creator>
    <dc:date>2022-09-30T07:57:42Z</dc:date>
    <item>
      <title>How to add option "Select All" in a drilldown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615318#M50484</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;I add a drildown in a Dashboard.&lt;/P&gt;&lt;P&gt;By this piece of code, I have a list of equipement in the drilldown&lt;/P&gt;&lt;P&gt;|inputlookup lookup.csv |stats count by id&lt;BR /&gt;|fields id&lt;/P&gt;&lt;P&gt;Is it possible to add an option "All" like the filter in the Excel?&lt;/P&gt;&lt;P&gt;If yes, how can I do it please?&lt;/P&gt;&lt;P&gt;If no, is there any idea that I can do? Basically&amp;nbsp; I want to choose 1 single equipement or all equipement.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;Julia&lt;/P&gt;</description>
      <pubDate>Fri, 30 Sep 2022 07:49:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615318#M50484</guid>
      <dc:creator>Julia1231</dc:creator>
      <dc:date>2022-09-30T07:49:21Z</dc:date>
    </item>
    <item>
      <title>Re: How to add option "Select All" in a drilldown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615322#M50485</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/245583"&gt;@Julia1231&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;yes, it's possible: you have to add a static option, adding All as label and * as value.&lt;/P&gt;&lt;P&gt;Then, if you like, you can set this value as default for your dropdown.&lt;/P&gt;&lt;P&gt;Something like this:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;    &amp;lt;input type="dropdown" token="Status"&amp;gt;
      &amp;lt;label&amp;gt;idopen_cases&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;All&amp;lt;/choice&amp;gt;
      &amp;lt;prefix&amp;gt;idopen_cases="&amp;lt;/prefix&amp;gt;
      &amp;lt;suffix&amp;gt;"&amp;lt;/suffix&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;idopen_cases&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;idopen_cases&amp;lt;/fieldForValue&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
          | inputlookup lookup.csv
          | dedup idopen_cases
          | sort idopen_cases
          | table idopen_cases
        &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;default&amp;gt;*&amp;lt;/default&amp;gt;
    &amp;lt;/input&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Fri, 30 Sep 2022 07:57:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615322#M50485</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-09-30T07:57:42Z</dc:date>
    </item>
    <item>
      <title>Re: How to add option "Select All" in a drilldown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615327#M50486</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I follow your instruction and have this error:&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Julia1231_0-1664526304063.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/21781iCF66DA5FB54476DD/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Julia1231_0-1664526304063.png" alt="Julia1231_0-1664526304063.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;Do you have any idea please?&lt;/P&gt;</description>
      <pubDate>Fri, 30 Sep 2022 08:26:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615327#M50486</guid>
      <dc:creator>Julia1231</dc:creator>
      <dc:date>2022-09-30T08:26:02Z</dc:date>
    </item>
    <item>
      <title>Re: How to add option "Select All" in a drilldown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615341#M50487</link>
      <description>&lt;P&gt;Hi &lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/245583"&gt;@Julia1231&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;Please share your search and your code.&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Fri, 30 Sep 2022 08:58:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615341#M50487</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-09-30T08:58:18Z</dc:date>
    </item>
    <item>
      <title>Re: How to add option "Select All" in a drilldown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615830#M50568</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352"&gt;@gcusello&lt;/a&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Here my script where group1 is the token of the drilldown:&lt;/P&gt;&lt;P&gt;|dbxquery connection="server" query="&lt;BR /&gt;SELECT id, time as time_receive, count(*) as count&lt;BR /&gt;FROM table&lt;BR /&gt;WHERE time &amp;lt; NOW()&lt;BR /&gt;GROUP BY id, time_receive "&lt;BR /&gt;|lookup lookup.csv numero OUTPUT type&lt;BR /&gt;|where type = $group1$&lt;BR /&gt;|eval _time=strptime(time_receive,"%Y-%m-%dT%H:%M:%S.%N")&lt;BR /&gt;|timechart span=1h count by type&lt;/P&gt;</description>
      <pubDate>Tue, 04 Oct 2022 14:11:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615830#M50568</guid>
      <dc:creator>Julia1231</dc:creator>
      <dc:date>2022-10-04T14:11:08Z</dc:date>
    </item>
    <item>
      <title>Re: How to add option "Select All" in a drilldown?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615832#M50569</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/245583"&gt;@Julia1231&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;try using search instead where, and if $group1$ can have a space or a special char inside, use quotes:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| dbxquery connection="server" query="
   SELECT id, time as time_receive, count(*) as count
   FROM table
   WHERE time &amp;lt; NOW()
   GROUP BY id, time_receive "
| lookup lookup.csv numero OUTPUT type
| search type="$group1$"
| eval _time=strptime(time_receive,"%Y-%m-%dT%H:%M:%S.%N")
| timechart span=1h count by type&lt;/LI-CODE&gt;&lt;P&gt;Anyway, dbxquery is a command to test a connection, it has very low performaces!&lt;/P&gt;&lt;P&gt;Usually DB Connect is used to load data from a DB in a table or a lookup, but not for on line searches, you have a very high respose time!&lt;/P&gt;&lt;P&gt;Ciao.&lt;/P&gt;&lt;P&gt;Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 04 Oct 2022 14:28:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-add-option-quot-Select-All-quot-in-a-drilldown/m-p/615832#M50569</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2022-10-04T14:28:21Z</dc:date>
    </item>
  </channel>
</rss>

