Getting Data In

Drop-down

Khuzair81
Path Finder

DROPDOWN - I want to create one dashboard. While creating Country Dropdown I want only those countries in dropdown which my team support(US, UK, AUSTRALIA ETC.) but we are getting data for All countries.

Query - index=* country="US"  OR country="UK" OR country="AUSTRALIA" | table country | dedup country 

The above Query give me the perfect result in dropdown.

But I want to add one more option "All" in the dropdown which gives me the above mentioned country data only. Is there anyway?

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Khuzair81,

as @richgalloway, said, you have to add a static option ("All") not associating to it "*" as usual (beacuse in this way you take all the countries) but the list of the wanted countries, e.g.:

country="US"  OR country="UK" OR country="AUSTRALIA"

Ciao.

Giuseppe

0 Karma

richgalloway
SplunkTrust
SplunkTrust

A dashboard input can mix static and dynamic choices.  The dynamic choices are those produced by the query shown.  Add a static choice called "All" and give it a value ("*" is common) that works with your main query.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...