<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to join rows to compare values? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-join-rows-to-compare-values/m-p/646771#M52879</link>
    <description>&lt;P&gt;maybe this wil help?:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form version="1.1"&amp;gt;
  &amp;lt;label&amp;gt;tmp-pr-tags&amp;lt;/label&amp;gt;
  &amp;lt;fieldset&amp;gt;
      &amp;lt;input type="dropdown" token="dropdown_tok" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Selecteer een PR_Tag:&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;PR_Tags...&amp;lt;/choice&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
          &amp;lt;![CDATA[
           index=main sourcetype=csv source=result_test.csv 
           | table PR_Tags, PR_ID
           | eval PR_Tags=split(PR_Tags,",")
           | mvexpand PR_Tags
           | dedup PR_Tags PR_ID
          ]]&amp;gt;
        &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;PR_Tags&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;PR_Tags&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;PR_Tags&amp;lt;/title&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;
           index=main sourcetype=csv source=result_test.csv 
           | where PR_Tags="$dropdown_tok$"
           | table PR_Tags, PR_ID
           | eval PR_Tags=split(PR_Tags,",")
           | mvexpand PR_Tags
           | dedup PR_Tags PR_ID
          &amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;50&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;</description>
    <pubDate>Tue, 13 Jun 2023 07:42:41 GMT</pubDate>
    <dc:creator>rrovers</dc:creator>
    <dc:date>2023-06-13T07:42:41Z</dc:date>
    <item>
      <title>How to join rows to compare values?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-join-rows-to-compare-values/m-p/646748#M52875</link>
      <description>&lt;P&gt;Hello.&lt;/P&gt;&lt;P&gt;I have these two rows (PR_Tags and PR_ID). Need to return the PR_ID's that are matching the PR_Tags when I select in a Dropdown filter (Like if I select the line 1row 1, return the PR_ID's that matches this PR_Tag selected)&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="KalebeRS_0-1686635236994.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/25802iC27346246EB82879/image-size/medium?v=v2&amp;amp;px=400" role="button" title="KalebeRS_0-1686635236994.png" alt="KalebeRS_0-1686635236994.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;How can I do that?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;index= host=  sourcetype=csv source=........\\resul_test.csv 
| table PR_Tags, PR_ID
| eval PR_Tags=split(PR_Tags,",")
| mvexpand PR_Tags
| dedup PR_Tags PR_ID&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 13 Jun 2023 05:49:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-join-rows-to-compare-values/m-p/646748#M52875</guid>
      <dc:creator>KalebeRS</dc:creator>
      <dc:date>2023-06-13T05:49:37Z</dc:date>
    </item>
    <item>
      <title>Re: How to join rows to compare values?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-join-rows-to-compare-values/m-p/646771#M52879</link>
      <description>&lt;P&gt;maybe this wil help?:&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;form version="1.1"&amp;gt;
  &amp;lt;label&amp;gt;tmp-pr-tags&amp;lt;/label&amp;gt;
  &amp;lt;fieldset&amp;gt;
      &amp;lt;input type="dropdown" token="dropdown_tok" searchWhenChanged="true"&amp;gt;
      &amp;lt;label&amp;gt;Selecteer een PR_Tag:&amp;lt;/label&amp;gt;
      &amp;lt;choice value="*"&amp;gt;PR_Tags...&amp;lt;/choice&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;
          &amp;lt;![CDATA[
           index=main sourcetype=csv source=result_test.csv 
           | table PR_Tags, PR_ID
           | eval PR_Tags=split(PR_Tags,",")
           | mvexpand PR_Tags
           | dedup PR_Tags PR_ID
          ]]&amp;gt;
        &amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;fieldForLabel&amp;gt;PR_Tags&amp;lt;/fieldForLabel&amp;gt;
      &amp;lt;fieldForValue&amp;gt;PR_Tags&amp;lt;/fieldForValue&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;title&amp;gt;PR_Tags&amp;lt;/title&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;
           index=main sourcetype=csv source=result_test.csv 
           | where PR_Tags="$dropdown_tok$"
           | table PR_Tags, PR_ID
           | eval PR_Tags=split(PR_Tags,",")
           | mvexpand PR_Tags
           | dedup PR_Tags PR_ID
          &amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;50&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;true&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;&lt;/LI-CODE&gt;</description>
      <pubDate>Tue, 13 Jun 2023 07:42:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-join-rows-to-compare-values/m-p/646771#M52879</guid>
      <dc:creator>rrovers</dc:creator>
      <dc:date>2023-06-13T07:42:41Z</dc:date>
    </item>
  </channel>
</rss>

