How to Add Dropdown Input option to Splunk Dashboard

How to Add Dropdown Input option to Splunk Dashboard

The main purpose of adding inputs in Splunk dashboard is to make dashboards dynamic. There are few easy steps to add dropdown input option to Splunk dashboard.

Step 1:

Open a dashboard which you want to make dynamic. You can see the Edit option on top right corner of the dashboard. Click on the Edit option.

drop1

Step 2:

After clicking Edit option you can see Add Input option in the dashboard , click on that. Then click on Dropdown.

drop2

Step 3:

Now edit the Dropdown option . There you have to give a Label, which will be shown  on the dashboard.  Then click the check box beside Search on Change . If you don’t click this then it will not effect the dashboard. So every time you have to click the check box. Give a Token name by which value will pass. Here we have a given a token name as dropdown_token .

drop3

There are two ways to put the values of the field. One is Static Options and another is Dynamic Options.

Step 4: Static Options

In the static options you have to add  the names of values of a  field  as you want to see to the dashboard and against those names you have to specify the values manually. At last click on Apply button.

drop4

Step 5 :

You have to pass the token inside the panels which you want to make dependent upon the token. Click on Edit Search of that panel. Token name should be enclosed by “$” sign. Also you have to mention the field name for which token will work. Here we have given the field name as method. Click on the Apply button.

drop5

Step 6:

After making changes in the dashboard click on Save button to save all the changes and refresh the dashboard tab once.

drop6

Step 7:

Finally Dropdown Input option is added in the dashboard. Select any method name from the dropdown list . Depending upon the value dashboard will populate. Here we have selected “get” as a method field value.

drop7
Step 8: Dynamic Options

Follow the steps from 1 to 3 as it is.In the dynamic options you have to enter a Search String from which we can get all the names of a particular field. Select the time as All time to get all the values of that field. Also you have to give Field For Label for which field you want to populate the dropdown input option. You have to give the Field For Value for which field you want to populate the dropdown input option . For selecting all values if the method field we have given All in static options. Here don’t need to write all the options manually . The option values will be  automatically generated  by Search String. Click on Apply button.

drop8

drop9

Step 9:

You have to pass the token inside the panels which you want to make dependent upon the token. Click on Edit Search of that panel. Token name should be enclosed by “$” sign. Also you have to mention the field name for which token will work. Here we have given the field name as method. Click on the Apply button.

drop5

Step 10:

After making changes in the dashboard click on Save button to save all the changes and refresh the dashboard tab once.

drop10

Step 11:

Finally Dropdown Input option is added in the dashboard. Select any method name from the dropdown list . Depending upon the value dashboard will populate. Here we have selected “DELETE” as a method field value.

drop11

Hope this has helped you in achieving the below requirement without fail:

How to Add Dropdown Input option to Splunk Dashboard

 

Happy Splunking !!

Advertisements

One comment

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.