Dashboards & Visualizations

Need to populate splunk panel on Dashboard based on a single filter(multivalue) choosen

architkhanna
Path Finder

I have a multivalue filter on dashboard that has two options A and B. On chosing "A" on filter , I want to populated Panel X with value N/A and on chosing value "B" from filter ,I want the panel to work with the splunk calculations.
How can we make this panel depends on token value chosen from the filter

0 Karma

woodcock
Esteemed Legend

Specify the value of A in the field be set to AND myField="A" | replace "A" with "N/A" in myField and the value of B be AND myField="B". Then have your search be something like this:

index="foo" AND sourcetype="bar" $myFieldToken$
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...