Dashboards & Visualizations

How to customize dropdown option to select some specified values

anooshac
Communicator

Hi All,

I have a drop down with values as below.

All

Task1_a

Task1_b

Task1_c

Task2_a

Task2_b

Task2_c

I want to have other 2 options in the dropdown as Task1_all and Task2_all, in which when Task1_all is clicked it should show the values of Task1_a, Task1_b and Task1_c, also when Task2_all is clicked it should show values of Task2_a, Task2_b and Task2_c. Is there any solution so that i can include these 2 options in my dropdown along with the existing options?

Labels (2)
Tags (3)
0 Karma

vhharanpositka
Path Finder

Hi @anooshac 

 

If my understanding is correct, then you can try this.

In static option,

Task1_all --- "Task1_a" OR "Task1_b" OR "Task1_c"

Task2_all --- "Task2_a" OR "Task2_b" OR "Task2_c"

 

My Simulation

Current Values in the dropdown

vhharanpositka_0-1637344616841.png

 

I tried to combine splunk_web_access and splunk_web_service as Splunk_web

I used,

Splunk_web --- "splunk_web_access" OR "splunk_web_service"

vhharanpositka_1-1637345275057.png

 

This is working for me!!!

 

Regards

 

 

 

 

0 Karma

anooshac
Communicator

Hi, Thank you for replying. The other values in the dropdown are collected using one query. Is it possible to use this method when the values are vary?

0 Karma

vhharanpositka
Path Finder

Yes, You can do like that

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...