Dashboards & Visualizations

Dropdown help

mcbradford
Contributor

I am trying to pass a greater than to my search, but when it gets passed to the search the search looks like this:

=">3"

There are two problems, (1) the "=" and (2) the ""

The "=" is part of my search, so I removed it and changed the choices to "=1" but this passes everything with the ""



0
1
2
3
4
5
>3

Tags (1)

bshuler_splunk
Splunk Employee
Splunk Employee

<input type="dropdown" token="wfap_priority">

<label>Select Priority (5 is high suspect)</label>

<choice value="0">&gt;0</choice>

<choice value="1">&gt;1</choice>

<choice value="2">&gt;2</choice>

<choice value="3">&gt;3</choice>

<choice value="4">&gt;4</choice>

<choice value="5">&gt;5</choice>

</input>

and your search should look something like:
wfap_priority > $wfap_priority$
0 Karma

HiroshiSatoh
Champion

The results of example, but where is the problem?

example:
search sentence
sourcetype="csv-6" wfap_priority > $wfap_priority$ ・・・・・

dropdown
0:[wfap_priority > 0]
1:[wfap_priority > '1']
2:[wfap_priority > "1"]

0 Karma

HiroshiSatoh
Champion

Can the whole of the view be presented wanting see the search sentence assembled?

0 Karma

HiroshiSatoh
Champion

Can XML be presented?

0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...