Dashboards & Visualizations

Dashboard Studio cascading inputs not updating

UtkuOzkutucu
Engager

I am having an issue with cascading dropdowns in Splunk Dashboard Studio.

Parent Dropdown (tok_line): Populated by a CSV lookup.

Child Dropdown (tok_machine): Populated by the same CSV, filtered by the parent token: | inputlookup line_machine_map.csv | where line="$tok_line$" | sort tonumber(sort_order) | table machine.

When I select a value in the parent dropdown (e.g., Line "B3") and a corresponding value in the child dropdown (e.g., Machine "Dolum Spektrum"), and then change the parent selection to "B1", the child dropdown still displays "Dolum Spektrum" in the UI, even though that value is not present in the results for "B1". What can I do?

Labels (3)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Dashboard Studio still does not have some of the capabilities of SimpleXML dashboards. You might have better luck approaching this with Classic SimpleXML.

livehybrid
SplunkTrust
SplunkTrust

Hi @UtkuOzkutucu 

Unfortunately, the default or previously selected value does not change when an underlying search which populated the child dropdown is updated.

I would suggest raising an idea at https://ideas.splunk.com/ about this.  

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...

Network to App: Observability Unlocked [May & June Series]

In today’s digital landscape, your environment is no longer confined to the data center. It spans complex ...

SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...