Dashboards & Visualizations

Can we assign multiple actions to the drop down fields in a panel?

nandu1491
New Member

I am creating a panel in splunk enterprise by getting user input followed by drop down options (eg: ADD, DELETE, CHECK etc). We wanted to assign different actions for each drop down options, however we are unable to perform so.

We have tried passing the token of user input field into the drop down option, but the token ($$) is not working inside the panel choice values.

Note: All these drop down actions performs DB level queries such as INSERT, UPDATE, SELECT etc

Is there any feasible options in Splunk for this.

Tags (1)
0 Karma

sshelly_splunk
Splunk Employee
Splunk Employee

You can do a conditional check within the xml. something like the following:


add
update
delete


youraddsqlcommand


yourupdatesqlcommand


yourdeletesqlcommand



Than you can reference the $db_command$ token in your dashboard.... hope this helps. If not, please post what you have, and maybe we can help.

0 Karma

cmerriman
Super Champion

Can you post the syntax?

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...