Adding Splunk Dashboard Dropdown
With Splunk, one can delete, add, or adjust some inputs to suit your dashboard. The major reason for adding some inputs in a Splunk dashboard help make it dynamic. Adding any of these input features is easy with a few steps. In this case, we will check out how to put the Splunk Dashboard-Input Dropdown. Below are the steps followed when adding the Splunk Dashboard Dropdown.
Splunk Dashboard Dropdown Step 1
You need to open the Splunk dashboard that you require to make changes. After it opens, you will click on the edit selection located at the top right corner of the dashboard.
Splunk Dashboard Dropdown Step 2
After you click on edit, an Add Input option will pop up. Click on it and select Dropdown.
Splunk Dashboard Dropdown Step 3
Edit the Dropdown choice. There you’ve to provide a Label, that will be shown on the dashboard. Click the checkbox beside Search on Change. This has to be done so that it can take effect on the dashboard.
Clicking the check box has to be done all the time. Provide a Token name using a value that will pass. In this case, we are provided with a token name (dropdown_token).
There are 2 ways in which you can place field values. This includes Dynamic Options and Static Options.
Splunk Dashboard Dropdown Step 4: Static option
With static options, one has to add names of values of a field as you need to see the dashboard & against the names specified the values manually. After that, you need to click on the Apply button.
Splunk Dashboard Dropdown Step 5
You need to pass some tokens inside panels that you need to make dependent on a token. Click Edit Search of the panel. Remember that the token name needs to be enclosed using the “$” sign. You also need to mention the field name for the token that will work. Here the field name is given as a method. Click on the Apply button.
Splunk Dashboard Dropdown Step 6
With the changes made on the dashboard, you need to save them by clicking on the save button. This will save every change & refresh your dashboard tab once for changes to take effect.
Splunk Dashboard Dropdown Step 7
After all the steps, the Splunk-Dashboard Dropdown-Input will be added and saved. Choose a method-name from the dropdown list depending on the value the dashboard will populate. Here we’ve chosen “get” as a method field value.
Splunk Dashboard Dropdown Step 8: Dynamic Options
Here you need to follow the above steps (1 – 3). With dynamic options, you need to enter a Search String that will help you get the names of a certain field. Then, choose time as “All time” to get every value of this field. Also, you’ve to offer “Field For Label” for the field you need to populate the dropdown input option. You’ve to offer the Field Value for the field you need to populate a dropdown input choice. Choosing every value of the method field we’ve offered All in static options. At this option, the values will be auto-generated via the Search String. Then click on the Apply button.
How To Get Splunk Power User Certification?
FAQs
Can I have multiple dropdowns on a single dashboard?
Yes, you can have multiple dropdowns on a single dashboard.
How do I make the dropdown update other parts of the dashboard?
You can use the searchWhenChanged attribute on the <input> element to automatically refresh other panels on the dashboard when the dropdown selection changes.
How do I use the selected dropdown value in my Splunk searches?
index=your_index sourcetype=your_sourcetype $my_dropdown=”option1″
How do I create a cascading dropdown?
To create a cascading dropdown, you need to use nested subsearches in your search queries.
How do I make the dropdown filter the dashboard?
You do this by using the token attribute of the dropdown input.
