Dashboards & Visualizations

Filter on saved report

chrispappo
Explorer

Hi,

I created a report using the "setting -> Searches, reports, and alerts" menu. The name of the search is cptyinfo and it runs every 5 min.
i display the search in a dashboard like this

<table>
<title>Report Chart</title>
<search ref="cptyinfo"/> 
</table>

I was wondering if there is anyway to filter (using a token) on the column of this report ? (without recalculate anything)

Something like that:

<table>
<title>Report Chart</title>
<search ref="cptyinfo"> | where id=$id$ </search> 
 </table>

Thanks

Tags (3)
0 Karma

chrispappo
Explorer

Hi,

I find the solution

  <search id="components_search" ref="cptyinfo" />
<table>
      <title>Report Chart</title>
     <search base="components_search">
        <query>search fieldFromReport=$token$ </query> 
      </search>
</table>

works perfect !

Get Updates on the Splunk Community!

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...