Dashboards & Visualizations

How to customize dashboard to sort location-based details?

itishree
Explorer

I'm trying to get specific details and need some help.

I have two location-based input types, one for the state, and one for the city. I want to see the following details about the city: number of station ID's, station ID, station name, name of the city, name of the state.

Labels (1)
0 Karma

thambisetty
SplunkTrust
SplunkTrust

Screen Shot 2020-08-04 at 3.22.20 PM.png

 

<form>
  <label>test</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="state">
      <label>state</label>
      <search>
        <query>| makeresults 
| eval state="AndhraPradesh,Karnataka,Tamilnadu" 
| makemv state delim="," 
| mvexpand state 
| table state 
| eval city=case(state="Andhra Pradesh","Nellore,Vijayawada,Vizag",state="Karnataka","Bengaluru,Mysore",state="Tamilnadu","chennai") 
| makemv city delim="," 
| mvexpand city | dedup state | table state</query>
        <earliest>-15m</earliest>
        <latest>now</latest>
      </search>
      <fieldForLabel>state</fieldForLabel>
      <fieldForValue>state</fieldForValue>
    </input>
    <input type="dropdown" token="city">
      <label>city</label>
      <fieldForLabel>city</fieldForLabel>
      <fieldForValue>city</fieldForValue>
      <search>
        <query>| makeresults 
| eval state="AndhraPradesh,Karnataka,Tamilnadu" 
| makemv state delim="," 
| mvexpand state 
| table state 
| eval city=case(state="AndhraPradesh","Nellore,Vijayawada,Vizag",state="Karnataka","Bengaluru,Mysore",state="Tamilnadu","chennai") 
| makemv city delim="," 
| mvexpand city | search state=$state$ | dedup city | table city</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
    </input>
  </fieldset>
</form>

----------------------------------------------------------------------

upvote if this is what you are expecting 

————————————
If this helps, give a like below.
0 Karma

itishree
Explorer

Thanks but as per selecting city  i want to get city details 

like id of station ,state name,city name,station name i have 

so i want no. of station id is there and details of that city

0 Karma

johnnykhoueiry
Explorer

You mean after selection the city to create a another panel with the full details ?

0 Karma

thambisetty
SplunkTrust
SplunkTrust

Exactly you have to create panel to shoe city details or anything else you would like to show.

————————————
If this helps, give a like below.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...