The dashboard below should give you an idea of how you can do the two drop downs. There still needs to be some tweaking to allow "all" as a selectable item. I did try and do something where you can change the "span" based on the dropdown chosen, but it is tricker than I thought and will probably need some tokens to be set in the XML of the dashboard itself. <form version="1.1">
<label>test community dash</label>
<search id="base1">
<query>| makeresults count=100 | streamstats count | eval type=case(count<20,"type1",count>19 AND count<50,"type2",1=1,"type3")
| stats count as machine_count by type</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<fieldset submitButton="false">
<input type="dropdown" token="type_less_than_30">
<label>Type: Machine Count <30</label>
<fieldForLabel>type</fieldForLabel>
<fieldForValue>type</fieldForValue>
<search base="base1">
<query>| where machine_count<30</query>
</search>
<choice value="*">All</choice>
<default>*</default>
<!--<suffix>:::1h</suffix>-->
</input>
<input type="dropdown" token="type_greater_than_30">
<label>Type: Machine Count >30</label>
<fieldForLabel>type</fieldForLabel>
<fieldForValue>type</fieldForValue>
<search base="base1">
<query>| where machine_count>=30</query>
</search>
<choice value="*">All</choice>
<default>*</default>
<!--<suffix>:::2h</suffix>-->
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>| makeresults count=100 | streamstats count | eval type=case(count<20,"type1",count>19 AND count<50,"type2",1=1,"type3")
| stats count as machine_count by type | eval less_than_30_type="$type_less_than_30$" | eval greater_than_30_type="$type_greater_than_30$" | eval type_selected=if(match(greater_than_30_type,"\*"),less_than_30_type,greater_than_30_type) | where type=type_selected</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">none</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
</table>
</panel>
</row>
</form>
... View more