Dashboards & Visualizations

How to create a cascade dropdown?

New Member

Hey all,

I'm kind of new in Splunk and I would like some help on building a dashboard with a cascade dropdown. I have a script running fro different application and the idea is: once you select one of the applications (on a dropdown), it populates another dropdown with the corresponding servers (see image below).

alt text

On my Json I have a field that contains Application Name, another contains Script name and the other Server Name.
Even though I created a token ($myApp$) on my query ( | search ScriptName AppName="$myApp$"), when configuring the dropdown it didn't recognized it.

Could some one please help?
Thanks in advance.

Tags (3)
0 Karma


hello there,

please take a look at my previous answer, here:
although this one using an example of csv file, the logic is the same

hope it helps

0 Karma


@gcescatto would it be possible for you to provide some sample JSON for App/Script/Server data? You can mock/anonymize any sensitive information? Also if possible can you share the code for App and Server dropdown?

If not mocked data/code can not be shared, would it be fine if we create a mock run anywhere dashboard on similar lines to assist you?

| makeresults | eval message= "Happy Splunking!!!"
0 Karma


Are you sure you have checked the search on field change option in your App token drop downs?

0 Karma