topic Re: Splunk dynamic dropdown with different respective value for every label user chooses from menu in Splunk Search

How to make Splunk dynamic dropdown with different respective value for every label user chooses from menu?

sdkp03 — Wed, 02 Nov 2022 12:13:40 GMT

I have a lookup table like below:

label,value

op1,"Option 1"

op2,"Option 2"

op3,"Option 3"

When I try to configure dynamic dropdown, I could keyin search string to fetch value field only. My requirement is to display values and when user chooses a value, respective label should be sent in the backend instead of a static value. Example: If user chooses "Option 2", on submission value op2 should be the value passed instead of the value user chose from the dropdown.

Re: Splunk dynamic dropdown with different respective value for every label user chooses from menu

gcusello — Wed, 02 Nov 2022 08:20:56 GMT

Hi @sdkp03,

in the inputs you have two values to insers:

label,
value.

It's just for your need:

you have to put the field to display in the dropdown in the "label" and the field to pass as token in the "value".

Ciao.

Giuseppe

Re: Splunk dynamic dropdown with different respective value for every label user chooses from menu

sdkp03 — Wed, 02 Nov 2022 08:30:29 GMT

source code:

<label>Choose from options</label>

<fieldForLabel>labelval</fieldForLabel>

<fieldForValue>options</fieldForValue>

<query>| inputlookup keyvalue_pair.csv | stats count by value </query>

</search>

</input>

Can you please elaborate how to modify this to set fieldForLabel from search query similar to the fieldForValue.

Re: Splunk dynamic dropdown with different respective value for every label user chooses from menu

gcusello — Wed, 02 Nov 2022 08:52:56 GMT

Hi @sdkp03,

you need to have both the fields in your search:

<input type="dropdown" token="option"> <label>Choose from options</label> <fieldForLabel>labelval</fieldForLabel> <fieldForValue>options</fieldForValue> <search> <query> | inputlookup keyvalue_pair.csv | dedup labelval | sort labelval | table labelval options </query> </search> </input>

Ciao.

Giuseppe

Re: Splunk dynamic dropdown with different respective value for every label user chooses from menu

sdkp03 — Thu, 03 Nov 2022 23:28:22 GMT

perfect, it works like a charm 🙂 Thanks so much for your help.