So I have been using the following SPL to hide panels based on a token from a dropdown: <panel depends="$operating_system$"> However,  I want a few panels to only appear when "ALL" is selected, not when a individual Operating System is selected.  Is that possible using the "Depends" command?  If not, how? Thanks! ... View more

I have a CSV and a Keystore with data that I would like to join together.  I read the documentation: https://docs.splunk.com/Documentation/SplunkCloud/8.1.2101/SearchReference/Append https://docs.splunk.com/Documentation/SplunkCloud/8.1.2101/SearchReference/Join It appears my type of search might not be covered by either join or append.  I have a scan.csv that has about 19,000 IP's with scan data in it and another CSV called IP's.csv that has about 40,000 IP's.  The IP's.csv has some systems that have a system name and some that do not. Shortened example below: IP's.csv System              IP                     ABC        192.168.1.1                       ABC        192.168.1.2                       DEF         192.168.1.3                       DEF         192.168.1.4                      DEF         192.168.1.5                     Scan.csv IP                                 scan-data 192.168.1.1                 yes 192.168.1.2                 yes 192.168.1.3                 yes 192.168.1.4                 yes  192.168.1.5                 yes 192.168.1.6                 yes 192.168.1.7                 yes When I do a join with left, outer, or inner, lookup, or and appendcols, etc, it only returns the data that has "system" field.  The data will return and look something like this: System              IP           scan-data ABC        192.168.1.1       yes                    ABC        192.168.1.2       yes                  DEF         192.168.1.3       yes                   DEF          192.168.1.4      yes                  DEF         192.168.1.5       yes However, 192.168.1.6   and 192.168.1.7 do not return at all (it appears joins and appends only return what is in common, like by the System field), how do I do a search that returns data that does not have a "System"? I want the data to return to look something like this: System              IP           scan-data ABC        192.168.1.1       yes                    ABC        192.168.1.2       yes                  DEF         192.168.1.3       yes                   DEF         192.168.1.4       yes                  DEF         192.168.1.5       yes                  192.168.1.6       yes                   192.168.1.7      yes Any ideas?   ... View more