I am creating a table by appending the result of many searches together so each result appears in one row of the table. I would like to use a dropdown to have a row appear or not in the table. Is there a way to do this with Splunk? For example, if my dropdown has the default value 0, all rows should be shown. If the dropdown selects DCA (value 123456), then only the search "loadjob $siar_groups_div_dca_sid$ | stats values(Division) as Division, count as Total" should run, without any of the other rows appearing in the table.
<!-- Filter Dropdown box -->
<input type="dropdown" token="groupSelection" searchWhenChanged="true">
<label>Group Filter</label>
<choice value="0">Entire Network</choice>
<choice value="123456">DCA</choice>
<selectFirstChoice>true</selectFirstChoice>
</input>
<table>
<search id="siar_summary_search">
<query>
| loadjob $siar_groups_div_dca_sid$ | stats values(Division) as Division, count as Total
| append [ loadjob $siar_groups_div_dwt_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dco_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_cac_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_def_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dfw_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dgc_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dmw_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dmo_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dnf_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dnt_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dsa_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dsc_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dst_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dts_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_div_dwf_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_hca_psg_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_hca_shs_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_hca_uce_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_osb_cap_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_osb_div_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_rdc_ada_sid$ | stats values(Division) as Division, count as Total ]
| append [ loadjob $siar_groups_rdc_ast_sid$ | stats values(Division) as Division, count as Total ]
</query>
<earliest>@d</earliest>
<latest>now</latest>
... View more