Dashboards & Visualizations

How to pass a dropdown value in the lookup

aditsss
Motivator

Hi All,

I have one requirement.

I have one dropdown as below:

 

<input type="dropdown" token="OrgName" searchWhenChanged="true">
<label>Org Name</label>
<choice value="accertify">accertify</choice>
<choice value="gcp">gcp</choice>
<choice value="b_marketingforce">b_marketingforce</choice>
<initialValue>gcp</initialValue>
<default>gcp</default>
</input>

Below is my query for the panel where I am passing the drop down value like below:

<query>|inputlookup HealthCheck.csv| where $OrgName$|table Date OrgHealth%</query>

But its not taking the token.

Can someone guide me .How I need to pass the token.

Labels (3)
0 Karma
1 Solution

scelikok
SplunkTrust
SplunkTrust

Hi @aditsss,

You need to use field name to filter lookup values, assuming lookup field name is for OrgName is OrgName try below;

<query>|inputlookup HealthCheck.csv where OrgName="$OrgName$"|table Date OrgHealth%</query>

 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.

View solution in original post

scelikok
SplunkTrust
SplunkTrust

Hi @aditsss,

You need to use field name to filter lookup values, assuming lookup field name is for OrgName is OrgName try below;

<query>|inputlookup HealthCheck.csv where OrgName="$OrgName$"|table Date OrgHealth%</query>

 

If this reply helps you an upvote is appreciated.

If this reply helps you an upvote and "Accept as Solution" is appreciated.
Get Updates on the Splunk Community!

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

Unlock Instant Security Insights from Amazon S3 with Splunk Cloud — Try Federated ...

Availability: Must be on Splunk Cloud Platform version 10.1.2507.x to view the free trial banner. If you are ...