I have a dashboard containing a checkbox with some values. These values are OR'd together in my search string. For example:
translates to: search MY_FIELD= A OR B OR C
If the user selects value C I would like another input field to either appear or to become enabled on my dashboard. Specifically I want two radio buttons to become available with values of Yes and No.
So the search should become:
search MYFIELD= A OR B OR (C AND MYOTHER_FIELD=Yes/No)
Is this possible?
Yes, take a look on the Splunk 6.x dashboard examples - under Cascading Form Input or Post Process Search.
Hope this helps - please rate if it does.