Dashboards & Visualizations

Add "Text" Input in Dashboard that changes base query

demkic
Explorer

Hello,

I am wondering if it is possible to ADD INPUT of "text" in my dashboard and then when user types in a specific text, say the name of a country, that it changes the base search of all the panels in my dashboard. For example:

assume one of my panels has in the base search written:

source=A amount=B type=C country=Italy | stats count .....

I would like a user of this dashboard to be able to enter a different country (example: Germany) in the textbox (which is located above all the panels in the dashboard) and for it to change the base query in each panel where country does not equal L anymore, but country=Germany. And let the search run normally with this new input.

Tags (1)
0 Karma

woodcock
Esteemed Legend

Yes, this is the whole point of having inputs in a form. Download this app and copy from their examples:

https://splunkbase.splunk.com/app/1603/

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...