Dashboards & Visualizations

How to have the best dropdown + OR statement?

kwanx
Explorer

Hello - assistance please.

Looking for best way to have an OR statement for "choice value" in drop down config.

Similar to this, but this does not work:

<input type="dropdown" token="location">
        <label>location</label>
        <choice value="*">ALL</choice>
        <choice value="BLTMMD*" OR "WASHDC*">site_1</choice>
        <choice value="BFLONY*" OR "FLSHNY*">site_2</choice>
        <initialValue>*</initialValue>
    </input>
0 Karma
1 Solution

davpx
Communicator

How about this?

<input type="dropdown" token="location">
         <label>location</label>
         <choice value="*">ALL</choice>
         <choice value="BLTMMD* OR WASHDC*">site_1</choice>
         <choice value="BFLONY* OR FLSHNY*">site_2</choice>
         <initialValue>*</initialValue>
     </input>

View solution in original post

0 Karma

marycordova
SplunkTrust
SplunkTrust

Here is what this looks like in the finished Dashboard:
alt text

@marycordova
0 Karma

marycordova
SplunkTrust
SplunkTrust

Assuming you have a dashboard and you want to provide a dropdown that defaults to everything or allows the user to select an OR separated list of possible values you could use the following:

  </search>
  <fieldForLabel>title</fieldForLabel>
  <fieldForValue>id</fieldForValue>
  <default>*</default>
  <valuePrefix>scenario_id="</valuePrefix>
  <valueSuffix>"</valueSuffix>
  <delimiter> OR </delimiter>

This is what this looks like in the WebUI:
alt text
alt text

@marycordova
0 Karma

kwanx
Explorer

hi marycordovacaa - this looks like it would work as well if I had many "OR" statements - this this case i have only 2 OR 3 per site (and only 9 sites) so since my options are simple, will go with davpx solution above, but will keep yours in mind if i have a more complex matrix of options.

Thx for the reply!

0 Karma

davpx
Communicator

How about this?

<input type="dropdown" token="location">
         <label>location</label>
         <choice value="*">ALL</choice>
         <choice value="BLTMMD* OR WASHDC*">site_1</choice>
         <choice value="BFLONY* OR FLSHNY*">site_2</choice>
         <initialValue>*</initialValue>
     </input>
0 Karma

kwanx
Explorer

davpx - thx for the reply, this worked! I was close, just wrong syntax 🙂

Thanks again!

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

&#x1f5e3; You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...