Dashboards & Visualizations

Filter results while Populating Drop down box

karthikbalakris
Explorer

hi all,
i have a drop down list box which displays the host names. but i want to filter the hosts that are displayed based on the host names.
For Ex: I have hosts named
ABC_1
ABC_2
DEF_1
DEF_2
Now i want the drop down bow to display only ABC_* Is this possible?
My current xml code is

"populatingSearch fieldForValue= "host" fieldForLabel="host">
| metadata type=hosts | hosts = "ABC_*"
/populatingSearch>"

But this is not working as expected. Kindly help.

Tags (2)
0 Karma
1 Solution

MHibbin
Influencer

Try:

| metadata type=hosts | search hosts="ABC_*"

View solution in original post

MHibbin
Influencer

Cool, glad it helped, can you mark the answer as accepted then please to let the community know, that no further help is required. Thanks

0 Karma

karthikbalakris
Explorer

@MHibbin

Your idea worked, with a very small correction though. Here is teh one that worked:

| metadata type=hosts | search host="HPSM_QA_*"

Its search hosts and not search hosts

anyway the idea is your and all the credit is to you.
Thanks So much

0 Karma

MHibbin
Influencer

Try:

| metadata type=hosts | search hosts="ABC_*"

karthikbalakris
Explorer

TYPO
Its search host and not search hosts

0 Karma

karthikbalakris
Explorer

@MHibbin

Your idea worked, with a very small correction though. Here is teh one that worked:

| metadata type=hosts | search host="HPSM_QA_*"

Its search hosts and not search hosts

anyway the idea is your and all the credit is to you.
Thanks So much

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...