Hi @cmerriman,
I have tried this option. Button is appearing in panel but not resetting the chart.
Below is the code. Please help me to resolve this issue.
Compliance Dashboard
Compliance Dashboard.
<input type="dropdown" token="policy_type">
<label>Policy Type</label>
<choice value="%">All</choice>
<choice value="Unprotected">Unprotected</choice>
<choice value="Monitoring">Monitoring</choice>
<choice value="Blocking">Blocking</choice>
<default>%</default>
<initialValue>%</initialValue>
</input>
<panel>
<title>Workstations per Policy</title>
<table>
<search>
<query>index="<Index Name>" source=”<Source Name> " earliest=-90d
| eval Unq_Policy = mvdedup(Policy)
| eval First_Byte = substr(Unq_Policy,1,1)
| eval Policy_Type = case(First_Byte="0","Unprotected" , First_Byte="1","Monitoring", 1=1,"Blocking")
| rename "Device Name" as DeviceName
| eval Workstation = mvdedup(DeviceName)
| eval drpDownVal = "$policy_type$"
| where like (Policy_Type,drpDownVal)
| dedup Workstation Unq_Policy
| stats count("Workstation") as "Workstation Count" by Unq_Policy, Policy_Type
| rename Unq_Policy as Policies
| table Policies Policy_Type "Workstation Count"
-90d@d
now
1
1d
delay
20
heatmap
none
false
false
true
true
Workstations per Policy Type
Reset Drilldown
index=" " source=” " earliest=-90d
| eval Unq_Policy = mvdedup(Policy)
| eval First_Byte = substr(Unq_Policy,1,1)
| eval Policy_Type = case(First_Byte="0","Unprotected" , First_Byte="1","Monitoring", 1=1,"Blocking")
| rename "Device Name" as DeviceName
| eval Workstation = mvdedup(DeviceName)
| eval drpDownVal = "$policy_type$"
| where like (Policy_Type,drpDownVal)
| dedup Workstation Policy_Type
| stats count("Workstation") as "Workstation Count" by Policy_Type
-90d@d
now
1
1d
delay
ellipsisNone
0
visible
visible
visible
linear
linear
0
inherit
pie
50
10
area
gaps
none
0.01
default
shiny
{"Unprotected": 0x900C3F, "Monitoring": 0xC70039, "Blocking":0xFF5733}
all
0
0
ellipsisMiddle
right
0
1
large
_aggregation
$click.value$
... View more