All Apps and Add-ons

Search options

sromil99
New Member

I am new to Splunk, I have build a Dashboard with the drop down options which will be used with the saved search.

How I can parse the selected value from the drop down in the saved search

i.e

eventtype=web-traffic | transactions clientip startswith="$ANY THING from the Drop down$" endswith="logout"

0 Karma

BobM
Builder

As far as I know, you can't use a saved search in this way with a dropdown. You need to define a searchTemplate and your search is almost correct for that. The Build and Edit Forms page in the docs explains it well with examples.

Let us know if you still need help.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...