Hello all,
I am trying to dynamically change from environments (i.e. Dev, QA, Prod, etc.) using the textbox input. Can one create separate ones? I have two different indexed data sources in one dashboard. I tried this but it didn't work...
<input type="multiselect" token="environment" searchWhenChanged="true">
<label>Select one or more environment(s):</label>
<search>
<query>| metadata (index=datapower OR index=tibco) type=environment
| stats count by environment</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<fieldForLabel>Environment</fieldForLabel>
<fieldForValue>Environment</fieldForValue>
<prefix>(</prefix>
<suffix>)</suffix>
<valueSuffix>"</valueSuffix>
<delimiter>OR</delimiter>
</input>
Thanks for the feedback.
Hi leomedina,
try something like the "multiple inputs" example from Splunk 6.x Dashboard Examples App:
<input type="multiselect" token="environment" searchWhenChanged="true">
<label>Select one or more environment(s):</label>
<search>
<query>
| metadata (index=datapower OR index=tibco) type=environment
| dedup environment
| sort environment
| table environment</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<fieldForLabel>environment</fieldForLabel>
<fieldForValue>environment</fieldForValue>
<prefix>(</prefix>
<suffix>)</suffix>
<valuePrefix>environment="</valuePrefix>
<valueSuffix>"</valueSuffix>
<delimiter> OR </delimiter>
</input>
Bye.
Giuseppe