Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Filter results while Populating Drop down box
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hi all,
i have a drop down list box which displays the host names. but i want to filter the hosts that are displayed based on the host names.
For Ex: I have hosts named
ABC_1
ABC_2
DEF_1
DEF_2
Now i want the drop down bow to display only ABC_* Is this possible?
My current xml code is
"populatingSearch fieldForValue= "host" fieldForLabel="host">
| metadata type=hosts | hosts = "ABC_*"
/populatingSearch>"
But this is not working as expected. Kindly help.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cool, glad it helped, can you mark the answer as accepted then please to let the community know, that no further help is required. Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@MHibbin
Your idea worked, with a very small correction though. Here is teh one that worked:
| metadata type=hosts | search host="HPSM_QA_*"
Its search hosts and not search hosts
anyway the idea is your and all the credit is to you.
Thanks So much
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Try:
| metadata type=hosts | search hosts="ABC_*"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
TYPO
Its search host and not search hosts
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@MHibbin
Your idea worked, with a very small correction though. Here is teh one that worked:
| metadata type=hosts | search host="HPSM_QA_*"
Its search hosts and not search hosts
anyway the idea is your and all the credit is to you.
Thanks So much
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
May 2026 Splunk Expert Sessions: Security & Observability
Network to App: Observability Unlocked [May & June Series]
SPL2 Deep Dives, AppDynamics Integrations, SAML Made Simple and Much More on Splunk ...
