Dashboards & Visualizations

Dashboard Studio: How to create a input dropdown from datasource?

squared_away
Engager

Hello,

I have a number of unique searches for various infrastructure resources. I would like to create a dashboard that builds a chart based on the chosen entry from a dropown. Unfortunately, there's no easy way to create a base search and use tokens.

In other words, I would like each input title to reference a specific search in datsources.

example dropdown: 

input selected value 1= "dataSources": "search_1"

input selected value 2 = "dataSources": "search_2"

input selected value 3 = "dataSources": "search_3"

I could not find any documentation with examples of something similar.

Thanks in advance.

Labels (1)
Tags (2)
0 Karma
1 Solution

squared_away
Engager

I solved the challenge on my own.

I created multiple input items and used the search as the value. Then, I used the token from the input as the primary datasource.

Example

"input_1": {
"options": {
"items": [
{
"label": "Metric 1",
"value": "| mstats ***unique-search-string1******"
},
{
"label": "Metric 2",
"value": "| mstats ***unique-search-string2******"
},
{
"label": "Metric 3",
"value": "| mstats ***unique-search-string3******"
}
],
"defaultValue": "",
"token": "hosts_tok"
},
"dataSources": {
"primary": "$hosts_tok$"
},
"title": "Hosts",
"type": "input.dropdown"
}

If there's a better way please let me know.

View solution in original post

0 Karma

squared_away
Engager

I solved the challenge on my own.

I created multiple input items and used the search as the value. Then, I used the token from the input as the primary datasource.

Example

"input_1": {
"options": {
"items": [
{
"label": "Metric 1",
"value": "| mstats ***unique-search-string1******"
},
{
"label": "Metric 2",
"value": "| mstats ***unique-search-string2******"
},
{
"label": "Metric 3",
"value": "| mstats ***unique-search-string3******"
}
],
"defaultValue": "",
"token": "hosts_tok"
},
"dataSources": {
"primary": "$hosts_tok$"
},
"title": "Hosts",
"type": "input.dropdown"
}

If there's a better way please let me know.

0 Karma

VatsalJagani
Super Champion

@squared_away - Kindly approve your own answer by clicking on the "Accept as Solution" button.

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...