Hello,
I have a dashboard with 2 inputs:
index and role, with the token viewfilterAnd a table with the result of a search.
I want to set the end off my search depending the values of $view$ and $filter$
I should have " | search index_name=*$filter$* | stats values(Role) by index_name " if $view$ is index
or " | search Role=*$filter$* | stats values(index_name) by Role " if $view$ is role
Any idee how to do this?
Thanks
You can set new tokens( which will be used in search) based on the value selected in the radio button. See the example in following Splunk documentation:
https://docs.splunk.com/Documentation/Splunk/7.2.5/Viz/PanelreferenceforSimplifiedXML#condition_.28f...
You can set new tokens( which will be used in search) based on the value selected in the radio button. See the example in following Splunk documentation:
https://docs.splunk.com/Documentation/Splunk/7.2.5/Viz/PanelreferenceforSimplifiedXML#condition_.28f...