Dashboards & Visualizations

Need to populate splunk panel on Dashboard based on a single filter(multivalue) choosen

architkhanna
Path Finder

I have a multivalue filter on dashboard that has two options A and B. On chosing "A" on filter , I want to populated Panel X with value N/A and on chosing value "B" from filter ,I want the panel to work with the splunk calculations.
How can we make this panel depends on token value chosen from the filter

0 Karma

woodcock
Esteemed Legend

Specify the value of A in the field be set to AND myField="A" | replace "A" with "N/A" in myField and the value of B be AND myField="B". Then have your search be something like this:

index="foo" AND sourcetype="bar" $myFieldToken$
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...