Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: Filter results while Populating Drop down box
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hi all,
i have a drop down list box which displays the host names. but i want to filter the hosts that are displayed based on the host names.
For Ex: I have hosts named
ABC_1
ABC_2
DEF_1
DEF_2
Now i want the drop down bow to display only ABC_* Is this possible?
My current xml code is
"populatingSearch fieldForValue= "host" fieldForLabel="host">
| metadata type=hosts | hosts = "ABC_*"
/populatingSearch>"
But this is not working as expected. Kindly help.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cool, glad it helped, can you mark the answer as accepted then please to let the community know, that no further help is required. Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@MHibbin
Your idea worked, with a very small correction though. Here is teh one that worked:
| metadata type=hosts | search host="HPSM_QA_*"
Its search hosts and not search hosts
anyway the idea is your and all the credit is to you.
Thanks So much
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Try:
| metadata type=hosts | search hosts="ABC_*"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
TYPO
Its search host and not search hosts
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@MHibbin
Your idea worked, with a very small correction though. Here is teh one that worked:
| metadata type=hosts | search host="HPSM_QA_*"
Its search hosts and not search hosts
anyway the idea is your and all the credit is to you.
Thanks So much
Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform
Calling All Security Pros: Ready to Race Through Boston?
Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...
