Hi Team, I have a table where employee name are group by manager name and their project count. PFB structure of my table in which i want to link to other dashboard (which have mgr and emp tokens for manager and employee name respectively) based on selection i did. For selection of manager value i added this in link target. form.mgr=$click.value$ I'm not sure how do i select employee name for his manager. Also, i want when i click on count no query string will add to query. Suppose i click on Khushboo how would i get this link target search. form.mgr=Shaurya&form.emp=Khushboo Manager Name Employee Name Project Count Shaurya Khushboo Neha Sachin 23 30 12 Mohan Virat 14 Harry Larry 23 Meghan Jack Nick Carson 12 13 14 ... View more

Hi Everyone, I have extracted field  name status using rex. Then I have added dropdown input in which I have all the values of status.  But data is not getting refreshed after selecting any value from dropdown. Though i have tried highlighted (status = $status$ ) in base query, where another dropdown with name level is working fine. PFB snippet of my code: <form> <search id="base_search"> <query> index=abc sourcetype=xyz earliest = $earliest$ latest = now() id = $id$ level = $level$ status = $status$ | sort id asc | rex field=msg "\{\"status\"\:\s+\"(?&lt;status&gt;[^\"\}]+)" </query> </search> <fieldset submitButton="false" autoRun="false"> <input type="dropdown" token="id" searchWhenChanged="true"> <label>Request Id</label> <choice value="*">ALL</choice> <fieldForLabel>id</fieldForLabel> <fieldForValue>id</fieldForValue> <search base="base_search_filter"> <query>search | dedup id | table id</query> </search> <default>*</default> <initialValue>*</initialValue> </input> <input type="dropdown" token="status" searchWhenChanged="true"> <label>Status</label> <choice value="*">All</choice> <default>*</default> <initialValue>*</initialValue> <fieldForLabel>status</fieldForLabel> <fieldForValue>status</fieldForValue> <search base="base_search_filter"> <query> search | dedup status | table status</query> </search> </input> </fieldset> <row> <panel> <table> <search base="base_search"> <query> search | table id,  status, </query> </search> <option name="drilldown">row</option> </table> </panel> </row> </form> ... View more

Hi @all,   i have following string which i want to break into there fields: service_name, host and port_id metics-ha-5924590-011.aba.corp.tyos.com:2002 service_name = metics host = ha-5924590-011.aba.corp.tyos.com port = 2002 anyone please help me, how can i do it in splunk query. Thanks !! ... View more