Answer by warren for Splunk conditional search

Since this is taking place on a dashboard (else you wouldn’t have tokens), you may be best-off building the possible searches into separate panels, and only displaying the one you choose by using the depends="$token$" option on each panel – using a conditional eval when a dropdown item is chosen

https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML

from User warren – Stack Overflow https://stackoverflow.com/questions/71534191/splunk-conditional-search/71558081#71558081
via IFTTT