How to filter our dashboard by each host or including all hosts?

[summerura]

Hi,

I'm trying to filter our dashboard by each host or including all hosts.
We have many field(chart) in a dashboard. And When we filter i expect all fields are changed.

We have two hosts for Europe and Asia in our data.
In the end we want to have 3 options. which means all host, Europe host and Asia host.

I tried to like this

but the results from all three filters are same.

Can somebody handle this problem?
Thanks for any help!

[nickhills · Accepted solution]

try using ...your search|dedup host|fields host
That should give you options to just display the individual host names.

You can add a default option for "All Hosts" and set that to *
However - this is probably not the best approach, but you may need to explain a bit more to help us find the best solution

[summerura]

Hey, thanks for help! yes now i have 3 host-options but the results are still same. I tried to filter with 3 other options. I added Static options like screenshot below. do you have andy idea?
Thanks.

[nickhills]

have you used the token from the dropdown in your search?

Take a look at this document which shows how you can use static and dynamic form fields with dashboards
https://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms#Static_and_dynamic_inputs_t...

[summerura]

hi @nickhillscpl
i solved it. Thanks very much!

[summerura]

unfortunately, i can't upload my screenshot.
I added Static options like this

Name Value
All / *
Europe / host_europe
Asia / host_asia

thanks