Dashboards & Visualizations

drop down filter issue

Keerthi
Path Finder

Hi, I dont understand the issue . the drop down filter is showing duplicate issues. can anyone pls help me how to resolve?

Keerthi_0-1708858292723.pngKeerthi_1-1708858314123.png

 

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Keerthi,

in the results of the search you are using to populate the dropdown, there are some duplicated values, so you have to dedup your results fo the field that you're using for displaying.

If you could share your dropdown search I could be more detailed.

Ciao.

Giuseppe

0 Karma

Keerthi
Path Finder

sure , this is what i see in search string inside. pls refer screenshot.

Keerthi_0-1708858928059.png

Keerthi_1-1708858951875.png

pls let me know if you need more information?

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Keerthi,

you have to dedup for the firld that you display, in the first search you dedup for two fields. so it could be possible that you have duplicated values for the displayed field.

Insteda in the second search, I don't see any dedup command.

Add a dedup row dedupping for the field to display.

Ciao.

Giuseppe

0 Karma

Keerthi
Path Finder

Hi,
are you telling me to write dedup command again. pls check the screenshot below:

Keerthi_0-1708945981162.png

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

 @Keerthi ,

you need only the dedup for the field to listù, the other dedup isn't required.

in few words, you should run something like this:

<your_search>
| dedup Time
| sort Time
| table Time

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk &#43; Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...

Data Management Digest – January 2026

Welcome to the January 2026 edition of Data Management Digest! Welcome to the January 2026 edition of Data ...

Splunk SOAR Now Available on Google Cloud Platform

We’re excited to announce that Splunk SOAR is now natively available as a SaaS solution on Google Cloud ...