Hi all,
I've created a Dropdown control based on the 'Label' field. In an ideal world, I would like to be able to select a label from the dropdown and all my charts would refresh if the issue types contain that particular label.
The problem I have is all the issue types contain more than 1 label. So in the dropdown control all the labels per issue type are available.
The query I've created is below:
In the controller, all the Labels per issue type appear in the dropdown:
In the dropdown I only need the 4/5 individual labels available for selection. Then when one is selected (e.g. NewRule), my charts / tables would refresh to only pick up issue types with that Label.
Please can anyone advise on how I fix this? I've attempted to change the Label from 'Group' to 'Explode' and use the Group & aggregate, but it hasn't seemed to have worked.
Thanks for your help.
Chris
Hi Chris,
Based on your screenshot, since there are two columns in the results, it's acting as a key-value pair dropdown and filtering on the first column (issue key). To have it filter on Label, you can hide the "Issue key" column after the fact or remove it from the query. I would also change the Labels aggregation to 'Explode' and then "Group & aggregate" step as you mentioned, so they're not displayed as the array.
In your charts, then you would have a filter Labels contains {SIEM_LABEL_SELECTOR_NEW}.
Let me know if that works for you, or if you have further questions.
Hi Tracy,
Thanks for getting back to me about this. Your suggestion worked :) Looks like I over complicated things!
Appreciate your help.
Chris
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.