Dashboards & Visualizations

How to change search based on Dropdown?

phwork
Explorer

Hi All,

I am trying to use a drop-down to run a search based on whats selected currently (in the drop-down) in Dashboard Studio

Here is what I have so far :

  • A drop-down that's populated by an input lookup table.
  • There are 4 distinct searches.
  • Every time an item is selected in the drop-down the associated search needs to run and the data displayed needs to change.
  • The searches are very different from one another so passing a value in a $token$ will not be enough.

What can I do to show data in the form of a table based on the item selected in the drop-down ?

 

Labels (3)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @phwork,

let me understand: you have a lookup containing two columns:

  • search_title
  • search_code

you want to create a dropdown, populated with this lookup, and run the search choosed in the dropdown, is this correct?

Why do you say that "$token$ will not be enough."?

you could run something like this:

<form>
  <label>Test</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="dropdown">
      <label>Dropdown</label>
      <search>
        <query>
           | inputlookup command_lookup.csv
           | sort search_title
           | table search_title search
        </query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <fieldForLabel>search_title</fieldForLabel>
      <fieldForValue>search</fieldForValue>
    </input>
  </fieldset>
  <row>
    <panel>
      <title>Test</title>
      <table>
        <search>
          <query>$dropdown$</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="count">30</option>
        <option name="drilldown">none</option>
        <option name="rowNumbers">true</option>
      </table>
    </panel>
  </row>
</form>

Ciao.

Giuseppe

0 Karma

phwork
Explorer

Hi Giuseppe,

 

Thank you for your reply.

I have a drop-down with 4 items. Each of the items has a different search associated with it. Based on what is picked in the drop-down,  a search  needs to run and display data in a a table. Also, this is in Dashboard Studio.

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @phwork,

now I'm prefering to wait to use Dashboard Studio until it will have all the features of Dashboard Classic!

Anyway, the approach I hintd is correct and runs on Classic Dashboards, try to apply to Dashboard Studio, it should run in the same way.

Ciao.

Giuseppe

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...