Dashboards & Visualizations

Dropdown Selection Sync

mstrozyk
Engager

Hello All

I want to search for two separate values depending on the dropdown selection in a dashboard. Essentially if ItemA is selected in the dropdown, I want to make a correlation with ItemB and have the rest of the dashboard search with both ItemA and ItemB. Originally I was hoping to provide a couple static options that looked like - ItemA|ItemB , ItemC|ItemD etc. but I couldn't find a way to search based on the regex of "ItemA|ItemB" ... I'm sure I'm missing something but if you could help it would be much appreciated. I'm not even sure using static options is the way to go so feel free to suggest something different.

Thanks!

Tags (1)
0 Karma

mstrozyk
Engager

@niketnilay

So here's an example...

Let's say you have a search that yields these results:

Apples
Oranges
Carrots
Cucumbers
Steaks
Hot Dogs

Now using this info, I want to classify them based on type and have the search filter based on each. So in the dropdown I was thinking of creating something like:

Fruits (Apples|Oranges)
Vegetables (Carrots|Cucumbers)
Meats (Steaks|Hot Dogs)

And then depending on what they select, I want to filter a search essentially adding "Apples|Oranges" so that I only get results that have either Apples or Oranges.

Let me know if I should explain further.

Thanks!

0 Karma

niketn
Legend

@mstrozyk please add more details of the values in Dropdown A and Dropdown B and final event with combined value being searched. Cascaded Dropdown can be created using Token from Dropdown A to Search for values in Dropdown B. Then event handler in Dropdown A and B can be used to concatenate selected values of both dropdown to set a common token using` tag, which can be passed on to the search.

However, we would be able to assist you better if you can provide sample data for each and if possible current Simple XML Dashboard code.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...