Hello,
I have a working dash that searches our web logs returns the results based off of a Category, which is chosen from a drop down. The search results should not include any URL's that end in image extensions. However there is a request to have just a single checkbox that allows images extensions in the results. Is there an option to have a single check box add/remove a variable?
Right now I've cheated by adding a second drop down that is defaulted to remove the images, and when changed, excludes an imaginary file extension, basically "only exclude a file extension you'll never find". As shown below.
Anything that pulls that off with a single checkbox?
<fieldset submitButton="false">
<input type="dropdown" token="pc" searchWhenChanged="true">
<label>Weblog Category</label>
<choice value="Hacking">Hacking</choice>
<choice value="Malware">Malware</choice>
</input>
<input type="dropdown" token="url" searchWhenChanged="true">
<label>Images</label>
<choice value="url!=*.gif url!=*.png url!=*.jpg url!=*.ico">Remove Image Extensions</choice>
<choice value="url!=*.filedoesnotexist">Include Image Extensions</choice>
<default>url!=*.gif url!=*.png url!=*.jpg url!=*.ico</default>
</input>
sourcetype=weblogs user="*" category=$pc$ $url$ | table user category url a bunch of other stuff
... View more