Dashboards & Visualizations

How to add a text box in a dashboard?

Engager

I have a dashboard which has a filter. In the filter, there are around 7 reports and by passing the token in the search string, we can reload the reports in the dashboard. I also need a text box in which if i type something which is related to a particular report, then that should be shown in the dashboard.

Say there is a report named EmployeeReport, if i type Employee=A*, then all the names starting with A should be displayed. Another report named organization, if i type Org.=A* then all organizations starting with letter A will be displayed. Here Employee and Org are header fields in their respective reports. Initially the dashboard is blank, the moment one selects something in the Dropdown, then the dashboard will be reloaded. So how can i bring this text box and link it with the dashboard?

0 Karma

SplunkTrust
SplunkTrust

You can add text box and include the token in your search

eg:

<form>
  <label>test</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="sourcetype" searchWhenChanged="false">
      <label>Sourcetype</label>
      <fieldForLabel>sourcetype</fieldForLabel>
      <fieldForValue>sourcetype</fieldForValue>
      <search>
        <query>index=_internal|stats count by sourcetype</query>
        <earliest>-15m</earliest>
        <latest>now</latest>
      </search>
      <choice value="*">All</choice>
    </input>
    <input type="text" token="srch">
      <label>Search</label>
      <initialValue>*</initialValue>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal sourcetype="$sourcetype$" source="*$srch$*"|table host,source,sourcetype</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
      </table>
    </panel>
  </row>
</form>
0 Karma

Engager

Hello @renjith.nair , if I add this to my xml and I type "Employee=*" in the text box then no results are coming.Further when I validated the query,the query came out to be something like this

MyQuery|serach Text="Employee=*"

and no reults are being displayed.If any other means you can suggest.
Thanks by the way

0 Karma

SplunkTrust
SplunkTrust

As you might have figured out, above was just an example .
You search which displays in the panel should have a column Employee and then add the token to this search.
MyQuery Employee=$textboxtoken$

Is it possible to paste your xml ?

0 Karma

Engager

Hello renjith.nair , if I add this in my xml and in the text box if I type Employee=*,then no resuls are coming.In the searh query it is displaying something like this

MyQuery|search Text="Employee=*"|

and no results are coming

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!