<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to display table headers based on form input? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140482#M8452</link>
    <description>&lt;P&gt;I'm looking for a way to display a table based on a dropdown input in a dashboard.  For example, if I choose "ASA" as the sourcetype, I want the table to only display the fields _time, host, src dest but if I choose "Infoblox" then I want the table to display _time, dhcpresponse, dnsquery, etc.  Is there a way to do this in simple XML?&lt;/P&gt;</description>
    <pubDate>Tue, 02 Jun 2015 21:01:56 GMT</pubDate>
    <dc:creator>john_dagostino</dc:creator>
    <dc:date>2015-06-02T21:01:56Z</dc:date>
    <item>
      <title>How to display table headers based on form input?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140482#M8452</link>
      <description>&lt;P&gt;I'm looking for a way to display a table based on a dropdown input in a dashboard.  For example, if I choose "ASA" as the sourcetype, I want the table to only display the fields _time, host, src dest but if I choose "Infoblox" then I want the table to display _time, dhcpresponse, dnsquery, etc.  Is there a way to do this in simple XML?&lt;/P&gt;</description>
      <pubDate>Tue, 02 Jun 2015 21:01:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140482#M8452</guid>
      <dc:creator>john_dagostino</dc:creator>
      <dc:date>2015-06-02T21:01:56Z</dc:date>
    </item>
    <item>
      <title>Re: How to display table headers based on form input?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140483#M8453</link>
      <description>&lt;P&gt;Do it like this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;fieldset&amp;gt;
&amp;lt;input type="dropdown" token="fields_by_sourcetype_token"&amp;gt;
  &amp;lt;label&amp;gt;Fields by Sourcetype&amp;lt;/label&amp;gt;
  &amp;lt;choice value="_time host src dest "&amp;gt;ASA&amp;lt;/choice&amp;gt;
  &amp;lt;choice value="_time dhcpresponse dnsquery"&amp;gt;Infoblox&amp;lt;/choice&amp;gt;
  &amp;lt;default&amp;gt;ASA&amp;lt;/default&amp;gt;
&amp;lt;/input&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Then do this:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;searchString&amp;gt;Blah BLAH BlAh | table $fields_by_sourcetype_token$&amp;lt;/searchString&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 02 Jun 2015 21:47:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140483#M8453</guid>
      <dc:creator>woodcock</dc:creator>
      <dc:date>2015-06-02T21:47:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to display table headers based on form input?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140484#M8454</link>
      <description>&lt;P&gt;You rock! &lt;/P&gt;</description>
      <pubDate>Wed, 03 Jun 2015 12:31:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-display-table-headers-based-on-form-input/m-p/140484#M8454</guid>
      <dc:creator>john_dagostino</dc:creator>
      <dc:date>2015-06-03T12:31:53Z</dc:date>
    </item>
  </channel>
</rss>

