<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: drilldown condition set token based on click.value in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499596#M32704</link>
    <description>&lt;P&gt;Hi @spavin,&lt;BR /&gt;
Thanks for pointing the order out. That helps.&lt;BR /&gt;
However it seems to me the matching condition applies to exact match only. So for instance if I have a graph with several values like: &lt;STRONG&gt;(master), abc-bla-01, abc-foo-01, abc-bla-02,abc-foo-02,abcd002&lt;/STRONG&gt;, I'd like the following behavior.&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;clicking on (master) displays a new panel specific to (master)&lt;/LI&gt;
&lt;LI&gt;clicking on any value containing "bla" displays a different panel specific to bla and hides the (master) panel&lt;/LI&gt;
&lt;LI&gt;clicking on any other value apart from (master) and values containing "bla" hides the panels above and displays something new.&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;The condition match for "bla" works as long as I type in the full value but I was not able to create a condition match which would capture any click.value containing that string. &lt;BR /&gt;
Thanks,&lt;BR /&gt;
Nelu&lt;/P&gt;</description>
    <pubDate>Mon, 03 Feb 2020 09:38:54 GMT</pubDate>
    <dc:creator>neluvasilica</dc:creator>
    <dc:date>2020-02-03T09:38:54Z</dc:date>
    <item>
      <title>drilldown condition set token based on click.value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499594#M32702</link>
      <description>&lt;P&gt;I currently have a drill down dashboard which sets tokens depending on the $click.value$. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;drilldown&amp;gt;
          &amp;lt;condition match="$click.value$ != &amp;amp;quot;(master)&amp;amp;quot;"&amp;gt;
            &amp;lt;set token="non_master"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
            &amp;lt;unset token="master"&amp;gt;&amp;lt;/unset&amp;gt;
          &amp;lt;/condition&amp;gt;
          &amp;lt;condition match="$click.value$ = &amp;amp;quot;(master)&amp;amp;quot;"&amp;gt;
            &amp;lt;set token="master"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
            &amp;lt;unset token="non_master"&amp;gt;&amp;lt;/unset&amp;gt;
          &amp;lt;/condition&amp;gt;
&amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I would want to add another condition which would set a token if $click.value$ contains a specific string, let's say "bla". I have tried using like and match but without success. &lt;BR /&gt;
Any suggestion on how can I achieve this?&lt;/P&gt;</description>
      <pubDate>Fri, 31 Jan 2020 13:32:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499594#M32702</guid>
      <dc:creator>neluvasilica</dc:creator>
      <dc:date>2020-01-31T13:32:04Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown condition set token based on click.value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499595#M32703</link>
      <description>&lt;P&gt;Hi @neluvasilica,&lt;/P&gt;

&lt;P&gt;What you have so far is:&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;If you click on a row that starts with  "(master)" then $master$ is set and   $non_master$ is unset&lt;/LI&gt;
&lt;LI&gt;If you click on  a row that doesn't start with  "(master)" then $master$ is unset and $non_master$ is set&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;The order of the conditions is important. If you want to match another option - eg "bla" then you'll need to check for that before you do the click.value != "(master)" check - because that will match everything that's  not "(master)" and the processing will stop there.&lt;/P&gt;

&lt;P&gt;Try this order:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;drilldown&amp;gt;
           &amp;lt;condition match="$click.value$ = &amp;amp;quot;bla&amp;amp;quot;"&amp;gt;
             &amp;lt;set token="bla"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
             &amp;lt;unset token="non_master"&amp;gt;&amp;lt;/unset&amp;gt;
             &amp;lt;unset token="master"&amp;gt;&amp;lt;/unset&amp;gt;
           &amp;lt;/condition&amp;gt;
           &amp;lt;condition match="$click.value$ = &amp;amp;quot;(master)&amp;amp;quot;"&amp;gt;
             &amp;lt;set token="master"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
             &amp;lt;unset token="non_master"&amp;gt;&amp;lt;/unset&amp;gt;
             &amp;lt;unset token="blah"
           &amp;lt;/condition&amp;gt;
           &amp;lt;condition match="$click.value$ != &amp;amp;quot;(master)&amp;amp;quot;"&amp;gt;
             &amp;lt;set token="non_master"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
             &amp;lt;unset token="master"&amp;gt;&amp;lt;/unset&amp;gt;
             &amp;lt;unset token="bla"&amp;gt;&amp;lt;/unset&amp;gt;
           &amp;lt;/condition&amp;gt;
 &amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;If you want a generic catch-all condition to set $non_master$, you can simply put &lt;CODE&gt;&amp;lt;conditon&amp;gt;...&amp;lt;/conditon&amp;gt;&lt;/CODE&gt; as the last block. It will only match if none of the other conditions matched.&lt;/P&gt;

&lt;P&gt;I assumed you also wanted a token $bla$ created - if not, just set master / non_master to suit your needs when it matches bla.&lt;/P&gt;

&lt;P&gt;Cheers,&lt;BR /&gt;
Daniel&lt;/P&gt;</description>
      <pubDate>Sat, 01 Feb 2020 00:33:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499595#M32703</guid>
      <dc:creator>spavin</dc:creator>
      <dc:date>2020-02-01T00:33:21Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown condition set token based on click.value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499596#M32704</link>
      <description>&lt;P&gt;Hi @spavin,&lt;BR /&gt;
Thanks for pointing the order out. That helps.&lt;BR /&gt;
However it seems to me the matching condition applies to exact match only. So for instance if I have a graph with several values like: &lt;STRONG&gt;(master), abc-bla-01, abc-foo-01, abc-bla-02,abc-foo-02,abcd002&lt;/STRONG&gt;, I'd like the following behavior.&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;clicking on (master) displays a new panel specific to (master)&lt;/LI&gt;
&lt;LI&gt;clicking on any value containing "bla" displays a different panel specific to bla and hides the (master) panel&lt;/LI&gt;
&lt;LI&gt;clicking on any other value apart from (master) and values containing "bla" hides the panels above and displays something new.&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;The condition match for "bla" works as long as I type in the full value but I was not able to create a condition match which would capture any click.value containing that string. &lt;BR /&gt;
Thanks,&lt;BR /&gt;
Nelu&lt;/P&gt;</description>
      <pubDate>Mon, 03 Feb 2020 09:38:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499596#M32704</guid>
      <dc:creator>neluvasilica</dc:creator>
      <dc:date>2020-02-03T09:38:54Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown condition set token based on click.value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499597#M32705</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;Check this&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;drilldown&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| makeresults 
| eval temp="(master), abc-bla-01, abc-foo-01, abc-bla-02,abc-foo-02,abcd002" 
| makemv delim="," temp 
| eval temp =trim(temp) 
| mvexpand temp&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;10&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;cell&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;condition match="like('row.temp',&amp;amp;quot;%bla%&amp;amp;quot;)"&amp;gt;
            &amp;lt;set token="showbla"&amp;gt;true&amp;lt;/set&amp;gt;
            &amp;lt;unset token="showmaster"&amp;gt;&amp;lt;/unset&amp;gt;
            &amp;lt;unset token="shownonmaster"&amp;gt;&amp;lt;/unset&amp;gt;
          &amp;lt;/condition&amp;gt;
          &amp;lt;condition match="'row.temp'== &amp;amp;quot;(master)&amp;amp;quot;"&amp;gt;
            &amp;lt;set token="showmaster"&amp;gt;true&amp;lt;/set&amp;gt;
            &amp;lt;unset token="showbla"&amp;gt;&amp;lt;/unset&amp;gt;
            &amp;lt;unset token="shownonmaster"&amp;gt;&amp;lt;/unset&amp;gt;
          &amp;lt;/condition&amp;gt;
          &amp;lt;condition match="'row.temp'!= &amp;amp;quot;master&amp;amp;quot;"&amp;gt;
            &amp;lt;set token="shownonmaster"&amp;gt;true&amp;lt;/set&amp;gt;
            &amp;lt;unset token="showbla"&amp;gt;&amp;lt;/unset&amp;gt;
            &amp;lt;unset token="showmaster"&amp;gt;&amp;lt;/unset&amp;gt;
          &amp;lt;/condition&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;table&amp;gt;
      &amp;lt;title&amp;gt;showbla- $showbla$ showmaster - $showmaster$ shownonmaster - $shownonmaster$&amp;lt;/title&amp;gt;
    &amp;lt;/table&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 03 Feb 2020 10:29:25 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499597#M32705</guid>
      <dc:creator>vnravikumar</dc:creator>
      <dc:date>2020-02-03T10:29:25Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown condition set token based on click.value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499598#M32706</link>
      <description>&lt;P&gt;that worked! thank you!&lt;/P&gt;</description>
      <pubDate>Mon, 03 Feb 2020 12:36:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-condition-set-token-based-on-click-value/m-p/499598#M32706</guid>
      <dc:creator>neluvasilica</dc:creator>
      <dc:date>2020-02-03T12:36:21Z</dc:date>
    </item>
  </channel>
</rss>

