topic Re: Input Filter and the supporting panels in Splunk Search

Input Filter and the supporting panels

prettysunshinez — Mon, 04 Jan 2021 16:54:53 GMT

I have a dropdown(say field A) as input to a dashboard.

And this dropdown value is passed/used only in certain panels in the dashboard.

The other panels(where this field value is not used) should be displayed as normal when the dropdown value is "*"

But when the dropdown value other than "*" is selected,then these others panels should be displayed in grey color..

Note : the panels where the dropdown values is not used are single value charts,and they are displayed in green,amber and red depending on the values it display..But when the dropdown value other than "*" is selected,it should be greyed out.

Kindly help

Re: Input Filter and the supporting panels

richgalloway — Mon, 04 Jan 2021 18:56:14 GMT

Try adding conditions to your inputs. The condition would be "$foo$=*". If it passes then it sets another token, like show_other_panels; if the condition fails then it clears the token. The other panels would be dependent on the "show_other_panels" token.

Re: Input Filter and the supporting panels

prettysunshinez — Tue, 05 Jan 2021 00:41:06 GMT

Thanks.

Could you show me how to do that please.

Re: Input Filter and the supporting panels

prettysunshinez — Tue, 05 Jan 2021 09:46:36 GMT

I tried this.

<set token="color">"red","green","yellow"</set>

</condition>

<set token="color">"red","green","yellow"</set>

</condition>

</change>

But am unable to give label!="ALL".

It is throwing an error

Re: Input Filter and the supporting panels

richgalloway — Tue, 05 Jan 2021 15:13:05 GMT

I'm not that strong with this so these suggestions may not help. My first thought is to set the color to a default value first and change it if "ALL" is selected.

<init> <set token="color">non-ALL value</set> </init> ... <change> <condition label="ALL"> <set token="color">"red","green","yellow"</set> </condition> </change>

My second thought is to try the match function.

<change> <condition label="ALL"> <set token="color">"red","green","yellow"</set> </condition> <condition match="foo!='ALL'"> <set token="color">"red","green","yellow"</set> </condition> </change>