Dashboards & Visualizations

How to create multiple dependent dropdowns on a dashboard?

ReachDataScient
Explorer

I have a need to create 2 dropdowns on a dashboard. The first dropdown should show Dev, Test, Prod as options and the second dropdown should show the below options based on what is selected in the first dropdown.
Dev -Dev1,Dev2,Dev3
Test -Test1,Test2,Test3
Prod -Prod1,Prod2,Prod3

1 Solution

niketn
Legend

@ReachDataScientist, you should get Splunk Dashboard Examples app which covers Cascading Form Input example and many more 🙂

You should ideally create a lookup file with mapping of Environments with respective Systems and use lookup as Dynamic Search for dependent dropdown. This will give you flexibility and option to extend your list of systems/environments.

Following example uses run anywhere search as per your question but the same can be changed to lookup once you have it. Please try out and confirm!

alt text

<form>
  <label>Dependent Drilldown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="tokEnvironment" searchWhenChanged="true">
      <label>Environment</label>
      <choice value="Dev">Dev</choice>
      <choice value="Test">Test</choice>
      <choice value="Prod">Prod</choice>
      <change>
        <unset token="tokSystem"></unset>
        <unset token="form.tokSystem"></unset>
      </change>
    </input>
    <input type="dropdown" token="tokSystem" searchWhenChanged="true">
      <label>System</label>
      <fieldForLabel>$tokEnvironment$</fieldForLabel>
      <fieldForValue>$tokEnvironment$</fieldForValue>
      <search>
        <query>| makeresults
| fields - _time
| eval Dev="dev1,dev2,dev3",Test="test1,test2,test3",Prod="prod1,prod2,prod3" 
| fields $tokEnvironment$
| makemv $tokEnvironment$ delim=","
| mvexpand $tokEnvironment$</query>
      </search>
    </input>
  </fieldset>
  <row>
    <panel>
      <title>Selected Environment: $tokEnvironment$ | Selected System: $tokSystem$</title>
      <html></html>
    </panel>
  </row>
</form>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@ReachDataScientist, you should get Splunk Dashboard Examples app which covers Cascading Form Input example and many more 🙂

You should ideally create a lookup file with mapping of Environments with respective Systems and use lookup as Dynamic Search for dependent dropdown. This will give you flexibility and option to extend your list of systems/environments.

Following example uses run anywhere search as per your question but the same can be changed to lookup once you have it. Please try out and confirm!

alt text

<form>
  <label>Dependent Drilldown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="tokEnvironment" searchWhenChanged="true">
      <label>Environment</label>
      <choice value="Dev">Dev</choice>
      <choice value="Test">Test</choice>
      <choice value="Prod">Prod</choice>
      <change>
        <unset token="tokSystem"></unset>
        <unset token="form.tokSystem"></unset>
      </change>
    </input>
    <input type="dropdown" token="tokSystem" searchWhenChanged="true">
      <label>System</label>
      <fieldForLabel>$tokEnvironment$</fieldForLabel>
      <fieldForValue>$tokEnvironment$</fieldForValue>
      <search>
        <query>| makeresults
| fields - _time
| eval Dev="dev1,dev2,dev3",Test="test1,test2,test3",Prod="prod1,prod2,prod3" 
| fields $tokEnvironment$
| makemv $tokEnvironment$ delim=","
| mvexpand $tokEnvironment$</query>
      </search>
    </input>
  </fieldset>
  <row>
    <panel>
      <title>Selected Environment: $tokEnvironment$ | Selected System: $tokSystem$</title>
      <html></html>
    </panel>
  </row>
</form>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

nagarajsf
Explorer

Hi @niketnilay

I'm stucked at same kind of scenario, how we can pass input/value to system variables (Dev1,Dev2,Dev3, Test1,Test2,Test3 ,Prod1,Prod2,Prod3).

I have posted question, and it somehow related to it, could you please assist here?
https://answers.splunk.com/answers/780873/multivalve-drilldown-and-dropdown-is-not-working-i.html
link text

0 Karma

ReachDataScient
Explorer

Instead of creating a lookup, how can i code the values in the xml.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...