<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: token value to be displayed as coloumns in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391680#M25682</link>
    <description>&lt;P&gt;Columns.. means.. do you want to display this a table, or table Header.&lt;BR /&gt;
Try using html module in simple xml to create you desired view&lt;/P&gt;</description>
    <pubDate>Tue, 13 Nov 2018 08:13:21 GMT</pubDate>
    <dc:creator>paramagurukarth</dc:creator>
    <dc:date>2018-11-13T08:13:21Z</dc:date>
    <item>
      <title>token value to be displayed as coloumns</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391679#M25681</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;Can i pass token valiues to variables  .&lt;BR /&gt;
i have token values like swapmemoryfree , swapmemorycached ....&lt;BR /&gt;
and these are field valiues in my index&lt;BR /&gt;
i want to display these as coloumns &lt;BR /&gt;
is it possible?&lt;/P&gt;</description>
      <pubDate>Tue, 13 Nov 2018 07:39:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391679#M25681</guid>
      <dc:creator>Mohsin123</dc:creator>
      <dc:date>2018-11-13T07:39:28Z</dc:date>
    </item>
    <item>
      <title>Re: token value to be displayed as coloumns</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391680#M25682</link>
      <description>&lt;P&gt;Columns.. means.. do you want to display this a table, or table Header.&lt;BR /&gt;
Try using html module in simple xml to create you desired view&lt;/P&gt;</description>
      <pubDate>Tue, 13 Nov 2018 08:13:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391680#M25682</guid>
      <dc:creator>paramagurukarth</dc:creator>
      <dc:date>2018-11-13T08:13:21Z</dc:date>
    </item>
    <item>
      <title>Re: token value to be displayed as coloumns</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391681#M25683</link>
      <description>&lt;P&gt;i mean these token values are my fields in my index &lt;BR /&gt;
so if i am using a multiselect to select (swapmemoryfree OR swapmemorycached)&lt;BR /&gt;
then passing them as a token value to my panel..&lt;BR /&gt;
how can i display values of swapmemoryfree  , swapmemorycached as table swapmemoryfree   swapmemorycached &lt;/P&gt;

&lt;P&gt;because these are my fileds in the index and these are passed as one token value&lt;BR /&gt;
pls help&lt;/P&gt;</description>
      <pubDate>Tue, 13 Nov 2018 08:52:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391681#M25683</guid>
      <dc:creator>Mohsin123</dc:creator>
      <dc:date>2018-11-13T08:52:38Z</dc:date>
    </item>
    <item>
      <title>Re: token value to be displayed as coloumns</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391682#M25684</link>
      <description>&lt;P&gt;You could have the different charts loaded and then just toggle on/off which ones are visible with a token. &lt;/P&gt;</description>
      <pubDate>Tue, 13 Nov 2018 18:10:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391682#M25684</guid>
      <dc:creator>kmaron</dc:creator>
      <dc:date>2018-11-13T18:10:36Z</dc:date>
    </item>
    <item>
      <title>Re: token value to be displayed as coloumns</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391683#M25685</link>
      <description>&lt;P&gt;Let's suppose that you have two fields you always want --  let's say index and source -- and then you want the user to be able to choose one additional field.  Just have your dashboard code have a line like  this at the end of the search...&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt; | table index source $fieldtoken$
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Then whatever word gets selected in your dropdown will replace that token, and that field will be added to your table.&lt;/P&gt;</description>
      <pubDate>Tue, 13 Nov 2018 20:27:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/token-value-to-be-displayed-as-coloumns/m-p/391683#M25685</guid>
      <dc:creator>DalJeanis</dc:creator>
      <dc:date>2018-11-13T20:27:07Z</dc:date>
    </item>
  </channel>
</rss>

