Hi everyone, I would like to ask on how to achieve this or if it is possible to implement. I have a dashboard with a simple drop down that shows the student name where I can select. If I select a student name from the drop down list, I want to display the contents on a text/csv file which store in the local disk. the filename of the file is the same as the student_name it contains some information about the student. the filename format is something like below: student_name1.csv student_name2.csv student_name3.csv and so on.. <form> <label>Student Record</label> <fieldset submitButton="false"> <input type="dropdown" token="student_name"> <label>Student Name</label> <default>*</default> <search> <query> "SELECT student_name FROM student_records" shortnames=true | table student_name | sort student_name </query> </search> </input> </fieldset> <row> <panel> <table> <search> <query> $student_name$ </query> </search> </table> </panel> </row> </form> How do I achieve this that when I select a student name from the drop down, it will open a text/csv file from the local disk? Thanks. ... View more

Hi Splunk Masters, I would like to ask some help on how to make the features on my dashboard work. Using the code below, my dashboard shows records and a filters on top where I can search for a specific record from the results of the SQL. The drilldown works but what I want to achieve is whenever I want to do another search, I want to clear the drilldown panel/tables below which I can't it work. Is there anything that I needs to set on the code below? <form> <label>Test Dashboard</label> <fieldset autoRun="true"> <input type="dropdown" token="filter_1"> <label>filter 1</label> <default>*</default> <fieldForLabel>filter_1</fieldForLabel> <fieldForValue>filter_1</fieldForValue> <search> <query>| "SQL query here to display records for filter 1 selection" </query> </search> </input> <input type="text" token="filter_2"> <label>filter 2</label> <default>*</default> </input> <input type="text" token="filter_3"> <label>filter 3</label> <default>*</default> </input> <input type="dropdown" token="filter 4"> <label>filter 4</label> <default>*</default> <fieldForLabel>filter_4</fieldForLabel> <fieldForValue>filter_4</fieldForValue> <search> <query>| "SQL query here to display record for filter 4 selection " </query> </search> </input> </fieldset> <row> <panel> <table> <search> <query>| SQL query here to display all records | search filter_1="$filter_1$"| search "filter_2"="*$filter_2$*" | search "filter_3"="*$filter_3$*" | search "filter_4"="*$filter_4$*" | table column1, column2, column3 </query> <earliest>-1h@h</earliest> <latest>now</latest> <sampleRatio>1</sampleRatio> </search> <drilldown> <set token="column1">$click.value$</set> <set token="column2">$row.column2$</set> <set token="column3">$row.column3$</set> <unset token="column_result"></unset> </drilldown> </table> </panel> </row> <row> <panel> <table depends="$column_result$"> <title>$row_column2$ results</title> <search> <query>| SQL query here to display records based on column search | search "column1"="$column1$" | search column2=$column2$ | search column3=$column3$ | table field1, field2, field3</query> <earliest>-1h</earliest> <latest>now</latest> </search> <drilldown> <set token="field1">$click.value$</set> <set token="field2">$row.field2$</set> <set token="field3">$row.field3$</set> </drilldown> </table> </panel> </row> <row> <panel> <table depends="$field1$"> <search> <query>| SQL query here to display field1 results | table - - - </query> <earliest>-1h</earliest> <latest>now</latest> </search> </table> </panel> </row> </form> ... View more

Hi guys, I am wondering if it is possible to add a header field to search result if the CSV source doesn't have a header? I know that props.conf is needed to setup but I am hoping that it can be done without making any change on the config. Let say my CSV is something like this: user1, google.com, 2002, 23:32:08 and if I do a search "| inputlookup filename.csv" it shows the results as a field name instead of the results. so I want to have something like: > username website hits date > user1 google.com 2002 23:32:08 Thanks. ... View more

Hi everyone. I would like to ask what is the function to get the number of records in a field? So here's my scenario. I use the search to get results below using transaction by username |search *** transaction by username | table server_name, username, ipaddress using the above results, i want to count the number of records in the ipaddress field and display the number of records but remove the field where ipaddress is less than 2 records. I want this kind of output: Thanks I hope someone can help me.. ... View more