Dashboards & Visualizations

Sorting dropdown options with multiple inputs

ft_kd02
Path Finder

Hi all,

Working on some cosmetic changes to a functional dashboard. In a standard dropdown, I have a field that populates a token. I fill this dropdown from a lookup table with the following columns:

Institution existingName newName

In this lookup, one item has a one to many relationship -- IE one newName value has 2 existingName values. To get around this, I changed that selection to be static, and modified the search to ignore it. 

Static:
Name     Value
Z               "X" OR "Y" 

Search: 

| inputlookup lookup.csv 
| where newName!="Z"

Functionally, this produces the results I want. The dashboard uses the token properly from both the static option and the lookup table. However, the static option is at the top, with the rest sorted properly. This is a minor nitpick, but I'd like to sort the results of both the lookup table and the static option together. 

Is this possible? Should I pass the "X" or "Y" into the lookup instead?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

4 Ways the Splunk Community Helps You Prepare for .conf25

.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...