Developing for Splunk Enterprise
Highlighted

How do I develop a search query for my dropdown to sync with my table?

Explorer

I am trying to build a dashboard with a table that can be navigated with the dropdown menu.

This is the query for my table:

`source="LMCustomerRevLicense.csv" | dedup "Account Name" | table "Account Name" "Total Active Subscription Revenue _converted"`

What would the search token, search query need to be for the dropdown to search off the Account Names?

0 Karma
Highlighted

Re: How do I develop a search query for my dropdown to sync with my table?

Path Finder

Hey Ragate,

Depending on what you set the token value to when creating the drop down you need to add the token into your search like so:

 `source="LMCustomerRevLicense.csv"  $field_tok$ | dedup "Account Name" | table "Account Name" "Total Active Subscription Revenue _converted"`

Reference: http://docs.splunk.com/Documentation/Splunk/7.1.1/Viz/tokens

View solution in original post

Highlighted

Re: How do I develop a search query for my dropdown to sync with my table?

Explorer

Thank You!

0 Karma
Highlighted

Re: How do I develop a search query for my dropdown to sync with my table?

Path Finder

Dont forget to mark this as the answer

0 Karma