Dashboards & Visualizations

How to create a cascade dropdown?

New Member

Hey all,

I'm kind of new in Splunk and I would like some help on building a dashboard with a cascade dropdown. I have a script running fro different application and the idea is: once you select one of the applications (on a dropdown), it populates another dropdown with the corresponding servers (see image below).

alt text

On my Json I have a field that contains Application Name, another contains Script name and the other Server Name.
Even though I created a token ($myApp$) on my query ( | search ScriptName AppName="$myApp$"), when configuring the dropdown it didn't recognized it.

Could some one please help?
Thanks in advance.

Tags (3)
0 Karma

Ultra Champion

hello there,

please take a look at my previous answer, here:
although this one using an example of csv file, the logic is the same

hope it helps

0 Karma


@gcescatto would it be possible for you to provide some sample JSON for App/Script/Server data? You can mock/anonymize any sensitive information? Also if possible can you share the code for App and Server dropdown?

If not mocked data/code can not be shared, would it be fine if we create a mock run anywhere dashboard on similar lines to assist you?

| makeresults | eval message= "Happy Splunking!!!"
0 Karma


Are you sure you have checked the search on field change option in your App token drop downs?

0 Karma
Get Updates on the Splunk Community!

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...

New Customer Testimonials

Enterprises of all sizes and across different industries are accelerating cloud adoption by migrating ...