I want to create a dashboard where I can change the 'SessionId' in the following query, ideally I want to be able to select one from a dropdown list and the chart would refresh.
Is this possible?
You can achieve this through simple xml forms. Here's an example of what it might look like, where there is a dropdown of available session ids that is populated by a Splunk search.
For more information/examples on forms, here's a link to the docs: http://docs.splunk.com/Documentation/Splunk/latest/Viz/Exampleform
answered 08 Jul '13, 08:23