I have an issue with my drop-down inputs in my dashboard. If I select a dest port 80 from my list, I expect to only see dest port 80 in my results. However, it's also filtering on the source port 80. How can I stop this behavior, because it's occurring in other dashboards that I have?
</input>
<input type="multiselect" token="Dest_Port" searchWhenChanged="true">
<label>Select a Dest Port:</label>
<search>
<query>sourcetype="udp:514" host="172.20.1.62" | stats values(Dest_Port) as Dest_Port | mvexpand Dest_Port | sort Dest_Port</query>
</search>
<fieldForLabel>Dest_Port</fieldForLabel>
<fieldForValue>Dest_Port</fieldForValue>
<choice value="*">All</choice>
<default>*</default>
</input>
<input type="dropdown" token="URL" searchWhenChanged="true">
<label>Select URL</label>
<search>
<query>sourcetype="udp:514" host="172.20.1.62" | stats values(URL) as URL | mvexpand URL | sort URL</query>
</search>
<fieldForLabel>URL</fieldForLabel>
<fieldForValue>URL</fieldForValue>
<choice value="*">All</choice>
<default>*</default>
</input>
</fieldset>
<row>
<panel>
<table>
<search>
<query>sourcetype="udp:514" host="172.20.1.62" $User$ $Action$ $Src_IP$ $Dest_IP$ $Dest_Port$ $URL$ | table _time, User, Src_IP, Src_Port, Dest_IP, Dest_Port, Rule_Action, URL</query>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="count">100</option>
</table>
</panel>
</row>
</form>
... View more