Dashboards & Visualizations

How to change the drop-down source input on my dashboard to a checkbox?

banderson7
Communicator

I have a dashboard that allows the user to choose the source of the data from a drop-down menu, and it will show the data one source at a time. I'd like to use a checkbox instead, to show more than one source at a time. I suspect the token delimiter is the answer, but I'm not sure if that's the way to go or not. Right now, my token prefix is (source=/path/to/xml and the suffix is ), and the user chooses the xml file in that source directory, which is autopopulated by the filenames in the directory. I'd like to keep that logic if possible.

Is what I'm asking for possible?

0 Karma
1 Solution

sundareshr
Legend

Try this

      <prefix>(</prefix>
      <suffix>)</suffix>
      <valuePrefix>source="/path/to/xml/</valuePrefix>
      <valueSuffix>"</valueSuffix>
      <delimiter> OR </delimiter>

View solution in original post

sundareshr
Legend

Try this

      <prefix>(</prefix>
      <suffix>)</suffix>
      <valuePrefix>source="/path/to/xml/</valuePrefix>
      <valueSuffix>"</valueSuffix>
      <delimiter> OR </delimiter>

banderson7
Communicator

That did it, thank you!

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...