Splunk Enterprise

Need DropDown2 displayed as per DropDown 1 static Options

DDivagarInfant
Engager

DropDown 1 - 3 static options. DropDown 2 needs to display the products of those servers

ServerA

ServerB

ServerC

DropDown2 using Query : I need to bring the server A or B or C in my token? 

Query; |inputlookup abc.csv.gz |Hostname= "ServerA" 

 

 

<input type="dropdown" token="field1" searchWhenChanged="false">
<label>License Server</label>
<choice value="a">A</choice>
<choice value="b">B</choice>
<choice value="c">C</choice>
<default>a</default>
<change>
<condition value="a">
<unset token="c-details"></unset>
<unset token="b-details"></unset>
<set token="a-details"></set>
</condition>
<condition value="b">
<unset token="a-details"></unset>
<unset token="c-details"></unset>
<set token="b-details"></set>
</condition>
<condition value="c">
<unset token="a-details"></unset>
<unset token="b-details"></unset>
<set token="c-details"></set>
</condition>
</change>
</input>

Labels (1)
0 Karma

DDivagarInfant
Engager

But DropenDown 1 has Static values (Host Names) added hence if i add Dynamic based results in same dropdown1, values are duplicating.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Create a second dropdown with the dynamic search

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Do you mean something like this?

|inputlookup abc.csv.gz |where Hostname= "$field1$" 
0 Karma

DDivagarInfant
Engager

@ITWhisperer yes correct, but i have products for each Hostname which needs to be shown in drop down. 

 

Hostname A = Product A, Product B, Product C etc. 

Hostname B - Product X, product Y, Product Z etc

so depends on the Hostname, products needs to be populated in drop down

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Does your lookup identify which products are associated with with host? If so, you can dynamically populate the dropdown based on the results of a search which filters the products based on the hostname chosen.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...