How do you make a Splunk Dropdown based on a field from a string result?

[starbac]

I have a Splunk search that returns a string with the format A;B;C I want to create a dropdown in a Splunk dashboard based on the first field (A).

So my problem here, is first, how do I extract the first string before the semicolon, and second, how do I use that field dynamically in the dropdown?

[niketn]

@starbac if you would have provided your current query and field name with value "A;B;C". However, assuming your current field is called data, you can use the following command to extract first value A, using | eval value=replace(data,"^([^\;]+)\;(.*)","\1")

Please try the following run anywhere search to confirm!

| makeresults
| eval data="A;B;C"
| eval value=replace(data,"^([^\;]+)\;(.*)","\1")