Another way of doing this without using a lookup file is to create a search with makeresults and use that as the dynamic search (using loadjob) <search>
<query>
| makeresults
| eval _raw="Env,Name,SubEnv,SubName
US,USA,NY,New York
US,USA,LA,LA
US,USA,WT,Washington
Asia,APAC,DL,Delhi
Asia,APAC,MB,Mumbai
Asia,APAC,TK,Tokio
UAE,UAE,DB,Dubai
UAE,UAE,ABD,Abu-Dabhi"
| multikv forceheader=1
| table Env,Name,SubEnv,SubName
</query>
<done>
<set token="subenvironment_sid">$job.sid$</set>
</done>
<earliest>-7d@h</earliest>
<latest>now</latest>
</search> <panel>
<input type="radio" token="env" searchWhenChanged="true">
<label>env</label>
<choice value=".*">All</choice>
<default>.*</default>
<fieldForLabel>Name</fieldForLabel>
<fieldForValue>Env</fieldForValue>
<search>
<query>
| loadjob $subenvironment_sid$
| stats count by Env Name
</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
</input>
<input type="radio" token="subenv" searchWhenChanged="true">
<label>SubEnv</label>
<choice value="*">All</choice>
<initialValue>*</initialValue>
<fieldForLabel>SubName</fieldForLabel>
<fieldForValue>SubEnv</fieldForValue>
<search>
<query>
| loadjob $subenvironment_sid$
| where match(Env,$env|s$)
| stats count by SubEnv SubName
</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
</input>
<table>
<search>
<query>
| loadjob $subenvironment_sid$
</query>
<earliest>-7d@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">50</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="refresh.display">progressbar</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
... View more
