Dashboards & Visualizations

Getting to combine all the inputs in a list assigned to All Button

Anandharajuas
New Member

I am trying to develop a dashboard with various dependent dropbox getting their data from a lookup table.

 

Like the below one

 

Capture.PNG

 

If the user selects the All button and clicks on the submit button, I just want the details of the data based on the filters to be used in my search.  The store no is multi-select and all other filters are dropdowns.

 

I am using this store no as my base of the search for the rest of the dashboard details.

 

Looking for suggestions.

 

PS: I am a newbie to Splunk.

Labels (2)
0 Karma

niketn
Legend

This seems to be straight forwards as per the details/screenshot provided. Could you please add what is not working for you right now? What do you mean by "If the user selects the All button and clicks on the submit button"? Would it be possible for you to add your Simple XML right now? and also what SPL you are trying to run?

 

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

bowesmana
SplunkTrust
SplunkTrust

It's all about using tokens generated from one input in the search that populates the next, for example

      <input type="dropdown" token="region_state" searchWhenChanged="true">
        <label>State</label>
        <fieldForLabel>STATE</fieldForLabel>
        <fieldForValue>STATE</fieldForValue>
        <search>
          <query>| inputlookup patient_lookup.csv
  | stats count by STATE
  | fields STATE</query>
        </search>
        <default>*</default>
        <initialValue>*</initialValue>
        <choice value="*">All</choice>
      </input>
      <input type="dropdown" token="region_suburb" searchWhenChanged="true">
        <label>Suburb</label>
        <fieldForLabel>SUBURB</fieldForLabel>
        <fieldForValue>SUBURB</fieldForValue>
        <search>
          <query>| inputlookup patient_lookup.csv where STATE=$region_state$
  | stats count by SUBURB 
  | fields SUBURB</query>
        </search>
        <choice value="*">All</choice>
        <default>*</default>
        <initialValue>*</initialValue>
      </input>

As you can see from above, the first dropdown supports selection of STATE into token region_state and the second lookup populates its options by using the $region_state$ in its populating search.

 

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...