Dashboards & Visualizations

convert my dropdown to radio button input

navd
New Member

I have drop down listing down countries . for example my drop down has values as shown below .Now I want to display just two radio buttons instead of drop down ,which should be just UK and US and all the data under US should be US1,US2 .
And Uk radio button should have UK1,UK2,UK3
US1
UK1
UK2
UK3
US2

Tags (1)
0 Karma

niketn
Legend

@navd, you can code the <change> event handler for the radio button to set this. Based on the the information provided you need something like the following

      <change>
        <condition value="US">
          <set token="tokRegionFilter">US1,US2,US3</set>
        </condition>
        <condition value="UK">
          <set token="tokRegionFilter">UK1,UK2</set>
        </condition>
      </change>

Then if you are on Splunk 6.6 or higher, you can use Search Filter using IN clause. Preferably in the base search for faster results. The following example demonstrates the same approach. It uses | search Region IN ($tokRegionFilter$) down the line since the previous queries are used to generate the mock data. Similar to the question 3 US and 2 UK regions have been created, the same can be changed/adjusted as per the need.

alt text

Following is the Simple XML code for run anywhere example:

<form>
  <label>Radio Button for setting multiple values</label>
  <fieldset submitButton="false">
    <input type="radio" token="tokRegion" searchWhenChanged="true">
      <label>Select Region</label>
      <choice value="US">US</choice>
      <choice value="UK">UK</choice>
      <change>
        <condition value="US">
          <set token="tokRegionFilter">US1,US2,US3</set>
        </condition>
        <condition value="UK">
          <set token="tokRegionFilter">UK1,UK2</set>
        </condition>
      </change>
      <default>US</default>
    </input>
  </fieldset>
  <row>
    <panel>
      <title>Volume by Region</title>
      <chart>
        <search>
          <query>| makeresults
| fields - _time
| eval Region="US1,US2,US3,UK1,UK2"
| makemv Region delim=","
| mvexpand Region
| eval No_of_Hits=random()
| table Region No_of_Hits
| search Region IN ($tokRegionFilter$)
| sort - No_of_Hits</query>
          <earliest>$earliest$</earliest>
          <latest>$latest$</latest>
        </search>
        <option name="charting.chart">bar</option>
        <option name="charting.drilldown">all</option>
        <option name="refresh.display">progressbar</option>
      </chart>
    </panel>
  </row>
</form>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

navd
New Member

what if the list is not static (I mean US1,US2.US3 is not static values)

0 Karma

niketn
Legend

What is the query for getting the values US1, US2, US3 etc If it is dynamic how would you map US with US1, US2, US3 etc? Do the values actually have some number/pattern in the end (after the name)? If so, can you try the option proposed by @HiroshiSatoh to suffix asterisk *?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

HiroshiSatoh
Champion

How about setting value to "US* OR UK*"?

0 Karma

poete
Builder

Hi. Just a question. What do you mean by 'all the data under US should be US1,US2? Does it mean you want the values US1,US2 in the token to be used for a search?

0 Karma

navd
New Member

Yes the US should list only US1 and US2

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...