Dashboards & Visualizations

smart input text/dropdown on a dashboard?

dbcase
Motivator

Hi,

Is it possible to have a "smart" text or dropdown input on a dashboard?

Example:

Here is a list of account ID's

1234
1112
1113
2001
2002
3999
3998
3400

If a user inputs the number 1 then the list would be narrowed down to
1234
1112
1113

then if the user inputs another 1 (input now = 11) then the list would be further narrowed down to
1112
1113

Is this sort of thing possible?

0 Karma

niketn
Legend

@dbcase, just add atleast one static choice and you should have a Text Box based filter as well. Following run anywhere example has All as a static choice i.e. <choice value="*">All</choice>

  <fieldset submitButton="false">
    <input type="dropdown" token="tokDropdown" searchWhenChanged="true">
      <label>Dynamic Dropdown</label>
      <fieldForLabel>data</fieldForLabel>
      <fieldForValue>data</fieldForValue>
      <search>
        <query>|  makeresults
|  eval data="1234;1112;1113;2001;2002;3999;3998;3400"
|  makemv data delim=";"
|  mvexpand data
|  table data</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <choice value="*">All</choice>
    </input>
  </fieldset>

Please try out and confirm!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

somesoni2
Revered Legend

I think the multiselect input does that.

0 Karma

dbcase
Motivator

ding ding! worked perfectly! Thanks somesoni2!!

0 Karma

niketn
Legend

@dbcase, I have converted @somesoni2 's comment to Answer. Please accept to mark this question as answered! 🙂

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...