<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Different query execution in Dashboard studio panel on the basis of drop down value. in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671605#M54986</link>
    <description>&lt;P&gt;I am not sure it is possible with Dashboard Studio (which I assume you are using since you mentioned JSON). With Classic / SimpleXML dashboards, you can use a change handler on the dropdown to set additional tokens based on the choice made.&lt;/P&gt;</description>
    <pubDate>Tue, 12 Dec 2023 16:10:53 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2023-12-12T16:10:53Z</dc:date>
    <item>
      <title>Different query execution in Dashboard studio panel on the basis of drop down value.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671542#M54976</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;I want to execute different SPL query in Dashboard studio panel on the basis of dropdown value.&lt;/P&gt;&lt;P&gt;Drop down have two item only, if we select &lt;STRONG&gt;"Item1"&lt;/STRONG&gt; in dropdown then in particular panel of Dashboard should execute &lt;STRONG&gt;"Query1"&amp;nbsp;&lt;/STRONG&gt;if selected "item2" in dropdown then in same panel of Dashboard studio should execute &lt;STRONG&gt;"Query2"&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;item1 = "Aruba NetWorks"&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Item2 = "Cisco"&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Query1 =&amp;nbsp;index=dot1x_index sourcetype=cisco_failed_src OR sourcetype=aruba_failed_src|&amp;nbsp;| eval node= if(isnotnull(node_vendor),"Cisco","Aruba NetWorks")| search node = $&amp;lt;dropdown token&amp;gt;$ | table&amp;nbsp; node_dns node_ip region&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Query2 =&amp;nbsp;index=dot1x_index sourcetype=cisco_failed_src OR sourcetype=aruba_failed_src| eval node= if(isnotnull(node_vendor),"Cisco","Aruba NetWorks")| search node = $&amp;lt;dropdown token&amp;gt;$ | table&amp;nbsp; Name&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Kindly Guide.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Abhineet Kumar&lt;/P&gt;</description>
      <pubDate>Tue, 12 Dec 2023 11:26:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671542#M54976</guid>
      <dc:creator>Abhineet</dc:creator>
      <dc:date>2023-12-12T11:26:58Z</dc:date>
    </item>
    <item>
      <title>Re: Different query execution in Dashboard studio panel on the basis of drop down value.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671554#M54981</link>
      <description>&lt;P&gt;Try setting the value of the dropdowns to be the parts of the search which are different&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;label1 as Aruba NetWorks, value1 as node = "Aruba NetWorks"| table&amp;nbsp; node_dns node_ip region&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;label2 as Cisco, value2 as node = "Cisco"| table&amp;nbsp; Name&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;Then change your search to use the token like this&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;index=dot1x_index sourcetype=cisco_failed_src OR sourcetype=aruba_failed_src| eval node= if(isnotnull(node_vendor),"Cisco","Aruba NetWorks")| search $&amp;lt;dropdown token&amp;gt;$&lt;/STRONG&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Dec 2023 12:17:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671554#M54981</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-12-12T12:17:12Z</dc:date>
    </item>
    <item>
      <title>Re: Different query execution in Dashboard studio panel on the basis of drop down value.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671580#M54985</link>
      <description>&lt;P&gt;Hi Thanks for reply&lt;/P&gt;&lt;P&gt;We can't make changes to dropdown as dropdown fields populates from SPL query and it's uses by other panel in dashboard.&lt;/P&gt;&lt;P&gt;need assistance to make changes in panel SPL query itself so it pick query on the basis of dropdown field.&lt;/P&gt;&lt;P&gt;other if you could help me to makes changes in json code to manage both SPL query according to dropdown menu.&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Abhineet Kumar&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Dec 2023 14:07:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671580#M54985</guid>
      <dc:creator>Abhineet</dc:creator>
      <dc:date>2023-12-12T14:07:00Z</dc:date>
    </item>
    <item>
      <title>Re: Different query execution in Dashboard studio panel on the basis of drop down value.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671605#M54986</link>
      <description>&lt;P&gt;I am not sure it is possible with Dashboard Studio (which I assume you are using since you mentioned JSON). With Classic / SimpleXML dashboards, you can use a change handler on the dropdown to set additional tokens based on the choice made.&lt;/P&gt;</description>
      <pubDate>Tue, 12 Dec 2023 16:10:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Different-query-execution-in-Dashboard-studio-panel-on-the-basis/m-p/671605#M54986</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-12-12T16:10:53Z</dc:date>
    </item>
  </channel>
</rss>

