Getting Data In

How to filter our dashboard by each host or including all hosts?

Explorer

Hi,

I'm trying to filter our dashboard by each host or including all hosts.
We have many field(chart) in a dashboard. And When we filter i expect all fields are changed.

We have two hosts for Europe and Asia in our data.
In the end we want to have 3 options. which means all host, Europe host and Asia host.

I tried to like this

alt text

but the results from all three filters are same.

Can somebody handle this problem?
Thanks for any help!

0 Karma
1 Solution

Ultra Champion

try using ...your search|dedup host|fields host
That should give you options to just display the individual host names.

You can add a default option for "All Hosts" and set that to *
However - this is probably not the best approach, but you may need to explain a bit more to help us find the best solution

View solution in original post

0 Karma

Ultra Champion

try using ...your search|dedup host|fields host
That should give you options to just display the individual host names.

You can add a default option for "All Hosts" and set that to *
However - this is probably not the best approach, but you may need to explain a bit more to help us find the best solution

View solution in original post

0 Karma

Explorer

Hey, thanks for help! yes now i have 3 host-options but the results are still same. I tried to filter with 3 other options. I added Static options like screenshot below. do you have andy idea?
Thanks.

0 Karma

Ultra Champion

have you used the token from the dropdown in your search?

Take a look at this document which shows how you can use static and dynamic form fields with dashboards
https://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms#Static_and_dynamic_inputs_t...

0 Karma

Explorer

hi @nickhillscpl
i solved it. Thanks very much!

0 Karma

Explorer

unfortunately, i can't upload my screenshot.
I added Static options like this

Name Value
All / *
Europe / hosteurope
Asia / host
asia

thanks

0 Karma