How to Add Checkbox Input option to Splunk Dashboard
The main purpose of adding inputs in Splunk dashboard is to make dashboards dynamic. There are few easy steps to add checkbox input option to Splunk dashboard. You can select multiple options by checkbox input option.
Step 1:
Open a dashboard which you want to make dynamic. You can see the Edit option on top right corner of the dashboard. Click on the Edit option.
Step 2:
After clicking Edit option you can see Add Input option in the dashboard , click on that. Then click on Checkbox.
Step 3:
Now edit the Checkbox option . There you have to give a Label, which will be shown on the dashboard. Then click the check box beside Search on Change . If you don’t click this then it will not effect the dashboard. So every time you have to click the check box. Give a Token name by which value will pass. Here we have a given a token name as checkbox_token .
Step 4:
You have to write the Token Options . Give the Token Value Prefix , Token Value Suffix and Delimiter . You can easily do this by seeing Preview Option. In the Token Value Prefix you have to mention a field name for which you want to populate the checkbox option.
There are two ways to put the values of the field. One is Static Options and another is Dynamic Options.
Step 5: Static Options
In the static options you have to add the names of values of a field as you want to see to the dashboard and against those names you have to specify the values. You have to write all the names and values manually. At last click on Apply button.
Step 6 :
You have to pass the token inside the panels which you want to make dependent upon the token. Click on Edit Search of that panel. Token name should be enclosed by “$” sign. Here you don’t need to specify field name as we have passed the field name in the Token Options .Click on the Apply button.
Step 7:
After making changes in the dashboard click on Save button to save all the changes and refresh the dashboard tab once.
Step 8:
Finally Checkbox Input option is added in the dashboard. Select any method names from the checkbox list . Depending upon the values dashboard will populate. You can select multiple options from the list. Here we have selected “post” , “get” and “delete” as method field values.
Step 9: Dynamic Options
Follow the steps from 1 to 4 as it is. In the dynamic options you have to enter a Search String from which we can get all the names of a particular field. Select the time as All time to get all the values of that field. Also you have to give Field For Label for which field you want to populate the checkbox input option. You have to give the Field For Value for which field you want to populate the checkbox input option . For selecting all the values of that particular field we have given All in the static options. All the options in checkbox list will be automatically generated by the Search String. Click on Apply button.
Step 10:
You have to pass the token inside the panels which you want to make dependent upon the token. Click on Edit Search of that panel. Token name should be enclosed by “$” sign. Here you don’t need to specify field name as we have passed the field name in the Token Options .Click on the Apply button.
Step 11:
After making changes in the dashboard click on Save button to save all the changes and refresh the dashboard tab once.
Step 12:
Finally Checkbox Input option is added in the dashboard. Select any method names from the checkbox list . Depending upon the values dashboard will populate. You can select multiple options from the list. Here we have selected “GET” and “POST” as method field values.
Hope this has helped you in achieving the below requirement without fail:
How to Add Checkbox Input option to Splunk Dashboard
Happy Splunking !!
