Dashboards & Visualizations

Dropdown Input and accent characters

ookamidono
Explorer

I would like to create a dashboard with a dropdown input.
The input would affect dynamically the field application_methodName.
The problem is that I have some method names that contain accents in it, and they are not recognized when doing a search through this input.
Next is the code of the input query :

index=my_index timeseriesId="
appmethod.useractions"
| dedup application_methodId
| table application_methodName
| sort application_methodName


And the code of the query I'm trying to match with the dropdown input :

index=my_index application_methodName="$userAction_token$" timeseriesId="appmethod.useractions"
| stats sum(value)

I could also use a application_methodId field as the dropdown token (that would erase the problem), but then it won't be user friendly anymore. 
Any idea on how to make the query recognize accents ? Or a way to use the id as the token while still displaying the name in the dropdown ? 

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Your dropdown can use two columns from the query, one for the label (what the user sees) and one for the value (what the token is set to). Change your query for the dropdown to return two columns and use fieldforlabel and fieldforvalue options to define which is which.

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Your dropdown can use two columns from the query, one for the label (what the user sees) and one for the value (what the token is set to). Change your query for the dropdown to return two columns and use fieldforlabel and fieldforvalue options to define which is which.

ookamidono
Explorer

Thanks for the quick answer, it works perfectly well.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – September 2026

    Welcome to the September 2026 edition of Data Management Digest! September brought a fresh wave of ...

Federated Search for CloudWatch Unified Data Store Is Generally Available

As organizations modernize their cloud environments, AWS workloads generate more security, operational, and ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...