Help with Dashboarding

[aag]

Hello,

Here is the whole context and question:

https://community.splunk.com/t5/Splunk-Search/Aggregate-query-help/m-p/560663/highlight/true#M159340

As a next step from the search query would like to showcase the result on dashboard, where from a drop down when we select a particular attribute it will show the count of total and RecordOutRange on y-axis in time span of every15min on x-axis.

Thanks,

[ITWhisperer]

Create the dropdown so that the label is the description of the attribute you want to choose and the value to be the search condition for that attribute, then use the token in the search of the dashboard.

<choice value="count(eval(number < idx1 OR number > idx2)) as RecordOutRange by attr">Attribute</choice>

You might need to encode the < and >