Dashboards & Visualizations

variable field name with variable field value

truckturner
Loves-to-Learn

I am trying to make a drop down dependent on another dropdown. However my field name has a variable in it as well as the field value. 

Example: 

experiments__12345=CONTROL 
experiments__56752=test-1

experiments__12345=control

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@truckturner 

Can you please share more details about your expectations from your given example?

KV 

0 Karma

truckturner
Loves-to-Learn

I have two dropdowns one which lists the name of the experiment in this form : experiment.12345 

I have that dropdown configured and now I need the second one to display the field experiment__12345= values as it's options. 

The problem I can't figure out is how to make the second DD react when the experiment.12345 is selected. 

Does that help? 

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@truckturner 

Can you please try this? Just check dropdowns. 

<form>
  <label>Dependent Drop Down</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="field1">
      <label>field1</label>
      <fieldForLabel>value</fieldForLabel>
      <fieldForValue>value</fieldForValue>
      <search>
        <query>| makeresults | eval value="experiment.12345"</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <change>
        <eval token="selected_val">replace(value,"\\.","__")</eval>
      </change>
    </input>
    <input type="dropdown" token="field2">
      <label>field2</label>
      <fieldForLabel>value</fieldForLabel>
      <fieldForValue>value</fieldForValue>
      <search>
        <query>| makeresults | eval _raw="value
experiment__12342
experiment__12343
experiment__12345
experiment__12344
experiment__12346
"| multikv forceheader=1
| table value | search value="$selected_val$"</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
    </input>
  </fieldset>
</form>

 

Thanks
KV
▄︻̷̿┻̿═━一

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...