Dashboards & Visualizations

Getting to combine all the inputs in a list assigned to All Button

Anandharajuas
New Member

I am trying to develop a dashboard with various dependent dropbox getting their data from a lookup table.

 

Like the below one

 

Capture.PNG

 

If the user selects the All button and clicks on the submit button, I just want the details of the data based on the filters to be used in my search.  The store no is multi-select and all other filters are dropdowns.

 

I am using this store no as my base of the search for the rest of the dashboard details.

 

Looking for suggestions.

 

PS: I am a newbie to Splunk.

Labels (2)
0 Karma

niketn
Legend

This seems to be straight forwards as per the details/screenshot provided. Could you please add what is not working for you right now? What do you mean by "If the user selects the All button and clicks on the submit button"? Would it be possible for you to add your Simple XML right now? and also what SPL you are trying to run?

 

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

bowesmana
SplunkTrust
SplunkTrust

It's all about using tokens generated from one input in the search that populates the next, for example

      <input type="dropdown" token="region_state" searchWhenChanged="true">
        <label>State</label>
        <fieldForLabel>STATE</fieldForLabel>
        <fieldForValue>STATE</fieldForValue>
        <search>
          <query>| inputlookup patient_lookup.csv
  | stats count by STATE
  | fields STATE</query>
        </search>
        <default>*</default>
        <initialValue>*</initialValue>
        <choice value="*">All</choice>
      </input>
      <input type="dropdown" token="region_suburb" searchWhenChanged="true">
        <label>Suburb</label>
        <fieldForLabel>SUBURB</fieldForLabel>
        <fieldForValue>SUBURB</fieldForValue>
        <search>
          <query>| inputlookup patient_lookup.csv where STATE=$region_state$
  | stats count by SUBURB 
  | fields SUBURB</query>
        </search>
        <choice value="*">All</choice>
        <default>*</default>
        <initialValue>*</initialValue>
      </input>

As you can see from above, the first dropdown supports selection of STATE into token region_state and the second lookup populates its options by using the $region_state$ in its populating search.

 

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...