I am populating dropdown options with the following search. Right now, this is the search. | search service="$service_tok$"
| stats dc(region) by region Platform
| sort - Platform
| rex field=region "_(?<parse_regions>[^_]+)$"
| eval formatted_region = coalesce(parse_regions, region) I am doing some formatting to make my list look like this: Azure - Global
Azure - Central US
AWS - Global
AWS - ap-northeast-1 However, we would like to add two rows with 'label' fields called "AWS" and "Azure" so that we can style them in CSS to be the labels in a sectioned list like so: *Azure*
Global
Central US
__________
*AWS*
Global
ap-northeast-1 any ideas how I could add these 2 rows and have the sort work out to where the labels are at the top? I have tried to add these choices with appendpipe, but the row appears, then disappears before the search completes.
... View more