Dashboards & Visualizations

How to pass a dropdown value in the lookup

aditsss
Motivator

Hi All,

I have one requirement.

I have one dropdown as below:

 

<input type="dropdown" token="OrgName" searchWhenChanged="true">
<label>Org Name</label>
<choice value="accertify">accertify</choice>
<choice value="gcp">gcp</choice>
<choice value="b_marketingforce">b_marketingforce</choice>
<initialValue>gcp</initialValue>
<default>gcp</default>
</input>

Below is my query for the panel where I am passing the drop down value like below:

<query>|inputlookup HealthCheck.csv| where $OrgName$|table Date OrgHealth%</query>

But its not taking the token.

Can someone guide me .How I need to pass the token.

Labels (3)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @aditsss,

You need to use field name to filter lookup values, assuming lookup field name is for OrgName is OrgName try below;

<query>|inputlookup HealthCheck.csv where OrgName="$OrgName$"|table Date OrgHealth%</query>

 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok
SplunkTrust
SplunkTrust

Hi @aditsss,

You need to use field name to filter lookup values, assuming lookup field name is for OrgName is OrgName try below;

<query>|inputlookup HealthCheck.csv where OrgName="$OrgName$"|table Date OrgHealth%</query>

 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...