topic Re: Drop down in new dashboard is not filtering on my criteria in Splunk Search

Why the Drop down in new dashboard is not filtering on my criteria?

tdmahoney99 — Wed, 30 Aug 2023 16:25:27 GMT

Hey guys, new to splunk and trying to figure some things out and hit a wall. I created a dropdown called 'down'. I used this field in the search criteria and its not filtering based on the value I set in the drop down. Data is being pulled/returned but does not seem to be using the eval correctly. Any help would be greatly appreciated. Thanks!

Code is search:

source="plays.csv" host="DESKTOP-CU54MC0" sourcetype="csv" | apply "_exp_draft_275e108c50cd4522ac0479ad79873849" | `confusionmatrix("playType","predicted(playType)")` | eval down=$down$

I also cannot get it to restrict based on down in a search:

source="plays.csv" host="DESKTOP-CU54MC0" sourcetype="csv" | apply "_exp_draft_275e108c50cd4522ac0479ad79873849" | `confusionmatrix("playType","predicted(playType)")`| eval down=1

Re: Drop down in new dashboard is not filtering on my criteria

bowesmana — Wed, 30 Aug 2023 04:05:30 GMT

This statement

| eval down=$down$

is not a search statement - it is just creating a field called down with the value held by the token $down$

Maybe you mean you want to search for an existing field called down that has a value of the token, i.ei

| search down=$down$

or one of these two statements depending if your token value is numeric (first option) or string (second)

| where down=$down$ OR | where down=$down|s$

Re: Drop down in new dashboard is not filtering on my criteria

tdmahoney99 — Wed, 30 Aug 2023 04:08:41 GMT

Will give it a go. thanks for the feedback!