Getting Data In

How to filter our dashboard by each host or including all hosts?

summerura
Explorer

Hi,

I'm trying to filter our dashboard by each host or including all hosts.
We have many field(chart) in a dashboard. And When we filter i expect all fields are changed.

We have two hosts for Europe and Asia in our data.
In the end we want to have 3 options. which means all host, Europe host and Asia host.

I tried to like this

alt text

but the results from all three filters are same.

Can somebody handle this problem?
Thanks for any help!

0 Karma
1 Solution

nickhills
Ultra Champion

try using ...your search|dedup host|fields host
That should give you options to just display the individual host names.

You can add a default option for "All Hosts" and set that to *
However - this is probably not the best approach, but you may need to explain a bit more to help us find the best solution

If my comment helps, please give it a thumbs up!

View solution in original post

0 Karma

nickhills
Ultra Champion

try using ...your search|dedup host|fields host
That should give you options to just display the individual host names.

You can add a default option for "All Hosts" and set that to *
However - this is probably not the best approach, but you may need to explain a bit more to help us find the best solution

If my comment helps, please give it a thumbs up!
0 Karma

summerura
Explorer

Hey, thanks for help! yes now i have 3 host-options but the results are still same. I tried to filter with 3 other options. I added Static options like screenshot below. do you have andy idea?
Thanks.

0 Karma

nickhills
Ultra Champion

have you used the token from the dropdown in your search?

Take a look at this document which shows how you can use static and dynamic form fields with dashboards
https://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Buildandeditforms#Static_and_dynamic_inputs_t...

If my comment helps, please give it a thumbs up!
0 Karma

summerura
Explorer

hi @nickhillscpl
i solved it. Thanks very much!

0 Karma

summerura
Explorer

unfortunately, i can't upload my screenshot.
I added Static options like this

Name Value
All / *
Europe / host_europe
Asia / host_asia

thanks

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...