<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Single value panel - Display token value in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450756#M42049</link>
    <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;Try like&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;single&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index="_internal" |stats count&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;set token="count"&amp;gt;$result.count$&amp;lt;/set&amp;gt;
          &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;single&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;|makeresults | eval count=$count$&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/single&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Fri, 10 May 2019 04:51:12 GMT</pubDate>
    <dc:creator>vnravikumar</dc:creator>
    <dc:date>2019-05-10T04:51:12Z</dc:date>
    <item>
      <title>Single value panel - Display token value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450755#M42048</link>
      <description>&lt;P&gt;Hello Experts,&lt;/P&gt;

&lt;P&gt;I want to display a token value a Single value panel in the dashboard. Is there a way to pass on $token$ into the search query of the single value panel query? $token$ will be a number in my case.&lt;/P&gt;

&lt;P&gt;Sonething like this?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;panel id="P_Five"&amp;gt;

  &amp;lt;single&amp;gt;
    &amp;lt;search&amp;gt;       &amp;lt;query&amp;gt;$token$&amp;lt;/query&amp;gt;
      &amp;lt;earliest&amp;gt;@d&amp;lt;/earliest&amp;gt;
      &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Naresh&lt;/P&gt;</description>
      <pubDate>Fri, 10 May 2019 04:45:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450755#M42048</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-05-10T04:45:22Z</dc:date>
    </item>
    <item>
      <title>Re: Single value panel - Display token value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450756#M42049</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;Try like&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;single&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index="_internal" |stats count&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;set token="count"&amp;gt;$result.count$&amp;lt;/set&amp;gt;
          &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;single&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;|makeresults | eval count=$count$&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;/single&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 10 May 2019 04:51:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450756#M42049</guid>
      <dc:creator>vnravikumar</dc:creator>
      <dc:date>2019-05-10T04:51:12Z</dc:date>
    </item>
    <item>
      <title>Re: Single value panel - Display token value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450757#M42050</link>
      <description>&lt;P&gt;I was reading this as I'm looking something similar, that I haven't been able to figure it out.&lt;BR /&gt;
So, I have different token values within a Dashboard and I want to add all these values into a single value component.&lt;/P&gt;

&lt;P&gt;I thought it would be as simple as |makeresults |eval Total=$token1$+$token2$+$token1$ but it'snot working.&lt;/P&gt;

&lt;P&gt;Any idea?&lt;/P&gt;

&lt;P&gt;the single value component is showing "Search is waiting for input..." error&lt;/P&gt;</description>
      <pubDate>Wed, 16 Oct 2019 17:45:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Single-value-panel-Display-token-value/m-p/450757#M42050</guid>
      <dc:creator>pstamati</dc:creator>
      <dc:date>2019-10-16T17:45:26Z</dc:date>
    </item>
  </channel>
</rss>

