topic Re: Dashboard set input variables with a token from another input in Dashboards & Visualizations

Dashboard set input variables with a token from another input

thefuzz4 — Wed, 15 Aug 2018 20:48:35 GMT

I'm in the process of building out a new dashboard that will have 3 input selects.

1. Datetime
2. Input1
3. Input2

Input1 is dependent on Datetime and input2 is dependent on input1. I'm using search strings to set all 3 inputs but I need to have it setup populate the drop downs for input1 and 2. This way everything in the dashboard will only return results for the values that are in the drop downs. I know I can do an earliest latest in my search but I'd rather have input1 derive its data from the datetime selector. I don't see an option in the time selector values to tie it back to a token like when you add a search to a panel.

We're currently on Splunk 7.0.3

Thank you for your assistance.

Re: Dashboard set input variables with a token from another input

niketn — Sun, 19 Aug 2018 16:29:52 GMT

@thefuzz4 for the community to assist you better you would need to add more details on what is not working with sample code of what you have. Unfortunately the description provided in the question seems very high level for us to understand your issue and requirement.

Re: Dashboard set input variables with a token from another input

CarsonZa — Tue, 29 Sep 2020 20:57:39 GMT

when you create a time input there is a field named token. use this token in "input2" or " input3". In the time picker in "input2" go to advanced and enter $token_name.earliest$ and $token_name.latest$ respectively

Re: Dashboard set input variables with a token from another input

thefuzz4 — Tue, 21 Aug 2018 17:49:15 GMT

You got me on the right path. I wasn't able to put them into the advanced field for the time picker however I did add it to my search to populate the box at the beginning as so: earliest=$datetime.earliest$ latest=$datetime.latest$

Thank you for your help with this.