Dashboards & Visualizations

Quickly add list of inputs to dropdown menu?

Southy567
Explorer

Hey all!

Hoping you can help. I am currently building a dashboard that will allow users to select a option from a dropdown menu, and then type in a username in order to see all events for that input for that user.

I am in a bind however as the dropdown has several hundred options (unfortunately no way to slim that down) and I was wondering if there was a way to quickly and painlessly add the labels and inputs from a spreadsheet I have over into the dropdown, or if I have to go through and copy each of them individually.

Any help would be greatly appreciated!

Labels (3)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

You should be populating the dropdown list with a search.  That search get collect values from your indexes or can get them from a lookup file (or other places).  In the form below, your SPL (perhaps | inputlookup options.csv) goes in the "Search String" box.  The name of the field you want to show to users goes in the "Field For Value" box.

richgalloway_0-1667783487372.png

 

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

You should be populating the dropdown list with a search.  That search get collect values from your indexes or can get them from a lookup file (or other places).  In the form below, your SPL (perhaps | inputlookup options.csv) goes in the "Search String" box.  The name of the field you want to show to users goes in the "Field For Value" box.

richgalloway_0-1667783487372.png

 

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...