I have two dropdown menus, one for City and one for Camera_Name. Since our camera names changed a year ago, I used event types to tag the data with the name of the camera to make it so I was only using one name for each camera. I have a dashboard with the following: host="splunk" sourcetype="csv" $State$ tag=$Camera$ |eval Status=upper(Status) |stats count by Status . When I change the Camera dropdown menu that has the search string of sourcetype="csv" State="$State$"|stats count by tag it does not change the panels/graphs on the dashboard. If I open the panel in search, the statistics are different and what I want, but that is not shown on the dashboard. How can I get the dashboard to update?
I am very new to Splunk! Someone help me!!!
... View more