I have a KVstore and created a drop-down input filter. I can't seem to get it to filter my data. The drop-down lists all the correct data, but I can't seem to filter out information.
For example:
Sample Statistics Table has the fields: NAME, ID, FavoriteColor
Data/Inputs in the collection:
Abby, 01, Blue
Bill, 02, Green
Chris, 03, Purple
My drop-down is searching based on the ID. So when I click my drop-down, it lists: 01,02,03. However, if I select 03, it does nothing. Same with all other IDs. Is there something I'm missing?
I want to be able to list all data based on the ID, even if there are duplicates. For example:
Abby, 01, Blue
Bill, 02, Green
Chris, 03, Purple
Daniella, 03, Black
If I search on all IDs with 03, I'll get:
Chris, 03, Purple
Daniella, 03, Black
Can you share your search which is used to get data from the KV store ? For eg: if my drop down token is id_token, then the search will be
|inputlookup my_lookup where ID=$id_token$
More read : http://dev.splunk.com/view/SP-CAAAEZH