Dashboards & Visualizations

Dynamic drop down list issue

andrewpagans
Path Finder

Hi All,
I would like to automatically populate the drop drop down list using one of the 2 fields or both.
The issue is that I have to click in both input fields to trigger "Search on change"
In the img below, in the field1 I put "*" so the correct behavior should be to populate the field3.
The issue is that I have to just click on field2, to populate field3.

query used to populate the field3:

| index=test field1=$token_field1$ OR field2=$token_field2$

Could you please help me on solving the issue below (without using javascript)? 🙂

alt text

0 Karma

Sukisen1981
Champion

hi @andrewpagans - i see what you mean . what happens if you edit your field1 and field2 tokens and set under token options > default some text like 'select' or 'input text' or something like that?
If you do that, it should fire even when you change 1 field value

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...