<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dashboard conditional search not working in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434452#M42490</link>
    <description>&lt;P&gt;Hi @nareshinsvu&lt;/P&gt;

&lt;P&gt;Are you want to show/hide panel based on three dropdowns or based on query result?&lt;/P&gt;</description>
    <pubDate>Fri, 08 Mar 2019 05:22:22 GMT</pubDate>
    <dc:creator>vnravikumar</dc:creator>
    <dc:date>2019-03-08T05:22:22Z</dc:date>
    <item>
      <title>Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434448#M42486</link>
      <description>&lt;P&gt;Hello experts,&lt;/P&gt;

&lt;P&gt;I am trying to dynamically change my dashboard view based on 3 dropdown inputs. All the time, my show_tab1 results are hidden even if the condition matches. Any help to tweak the code is appreciated.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;row&amp;gt;
&amp;lt;panel&amp;gt;
  &amp;lt;table depends="$hide_table$"&amp;gt;
    &amp;lt;search&amp;gt;
                &amp;lt;query&amp;gt; | from datamodel:"0DP_T_common" | search C_Category=$selected_cat$ C_endpoint="$selected_endpoint$" C_Response=$selected_response$ |  table C_Day C_StartTime C_Category C_endpoint C_Response duration&amp;lt;/query&amp;gt;
      &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
      &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
      &amp;lt;done&amp;gt;
     &amp;lt;condition match="$result.selected_cat$=Categ_1 AND $result.selected_endpoint$=prime AND $result.selected_response$=00"&amp;gt;
      &amp;lt;unset token="hide_table"&amp;gt;&amp;lt;/unset&amp;gt;
      &amp;lt;set token="show_tab1"&amp;gt;true&amp;lt;/set&amp;gt;
     &amp;lt;/condition&amp;gt;
     &amp;lt;condition&amp;gt;
       &amp;lt;set token="hide_table"&amp;gt;true&amp;lt;/set&amp;gt;
       &amp;lt;unset token="show_tab1"&amp;gt;&amp;lt;/unset&amp;gt;
     &amp;lt;/condition&amp;gt;
      &amp;lt;/done&amp;gt;
     &amp;lt;/search&amp;gt;
  &amp;lt;/table&amp;gt;
  &amp;lt;table depends="$show_tab1$"&amp;gt;
    &amp;lt;search&amp;gt;
      &amp;lt;query&amp;gt; | from datamodel:"0DP_T_selected" | search C_Category=$selected_cat$ C_endpoint="$selected_endpoint$" C_Response=$selected_response$ |  table C_Day C_StartTime C_Category C_endpoint C_Response duration&amp;lt;/query&amp;gt;
      &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
      &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
     &amp;lt;/search&amp;gt;
   &amp;lt;/table&amp;gt;
&amp;lt;/panel&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 08 Mar 2019 01:50:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434448#M42486</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-03-08T01:50:48Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434449#M42487</link>
      <description>&lt;P&gt;@nareshinsvu ,&lt;/P&gt;

&lt;P&gt;You may use &lt;CODE&gt;depends&lt;/CODE&gt; and &lt;CODE&gt;rejects&lt;/CODE&gt; instead of using two tokens. But two tokens should work as well. &lt;/P&gt;

&lt;P&gt;In your condition , you are validating &lt;CODE&gt;$result.selected_cat$&lt;/CODE&gt; , &lt;CODE&gt;$result.selected_endpoint$&lt;/CODE&gt; and &lt;CODE&gt;$result.selected_response$&lt;/CODE&gt; but those are not part of your result set , instead the fields are &lt;CODE&gt;C_Category&lt;/CODE&gt; , &lt;CODE&gt;C_endpoint&lt;/CODE&gt; and  &lt;CODE&gt;C_Response&lt;/CODE&gt;. So replace the token names with the fields from the search result.&lt;/P&gt;

&lt;P&gt;i.e. try&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;condition match="$result.C_Category$=Categ_1 AND $result.C_endpoint$=prime AND $result.C_Response$=00"&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 08 Mar 2019 02:25:43 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434449#M42487</guid>
      <dc:creator>renjith_nair</dc:creator>
      <dc:date>2019-03-08T02:25:43Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434450#M42488</link>
      <description>&lt;P&gt;Hi @renjith.nair ,&lt;/P&gt;

&lt;P&gt;No Luck. I am getting the same result even after changing the condition as  you mentioned.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Naresh&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2019 04:59:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434450#M42488</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-03-08T04:59:33Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434451#M42489</link>
      <description>&lt;P&gt;@nareshinsvu ,&lt;/P&gt;

&lt;P&gt;Put the text in quotes &lt;/P&gt;

&lt;P&gt;ie.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;condition match='$result.C_Category$="Categ_1" AND $result.C_endpoint$="prime" AND $result.C_Response$="00"'&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 08 Mar 2019 05:11:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434451#M42489</guid>
      <dc:creator>renjith_nair</dc:creator>
      <dc:date>2019-03-08T05:11:04Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434452#M42490</link>
      <description>&lt;P&gt;Hi @nareshinsvu&lt;/P&gt;

&lt;P&gt;Are you want to show/hide panel based on three dropdowns or based on query result?&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2019 05:22:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434452#M42490</guid>
      <dc:creator>vnravikumar</dc:creator>
      <dc:date>2019-03-08T05:22:22Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434453#M42491</link>
      <description>&lt;P&gt;@vnravikumar - I wanted different searches for different set of Dropdowns actually.&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2019 05:34:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434453#M42491</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-03-08T05:34:04Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434454#M42492</link>
      <description>&lt;P&gt;Working example&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;Token settings&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;input type="text" token="category"&amp;gt;
      &amp;lt;label&amp;gt;Category&amp;lt;/label&amp;gt;
    &amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table depends="$hide_table$"&amp;gt;
        &amp;lt;title&amp;gt;First Table&amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;|makeresults|eval C_Category="$category$", C_endpoint="prime", C_Response="00" |  table C_Category C_endpoint C_Response duration&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
          &amp;lt;done&amp;gt;
            &amp;lt;condition match="$result.C_Category$=&amp;amp;quot;Categ_1&amp;amp;quot; AND $result.C_endpoint$=&amp;amp;quot;prime&amp;amp;quot; AND $result.C_Response$=&amp;amp;quot;00&amp;amp;quot;"&amp;gt;
              &amp;lt;unset token="hide_table"&amp;gt;&amp;lt;/unset&amp;gt;
              &amp;lt;set token="show_tab1"&amp;gt;true&amp;lt;/set&amp;gt;
            &amp;lt;/condition&amp;gt;
            &amp;lt;condition&amp;gt;
              &amp;lt;set token="hide_table"&amp;gt;true&amp;lt;/set&amp;gt;
              &amp;lt;unset token="show_tab1"&amp;gt;&amp;lt;/unset&amp;gt;
            &amp;lt;/condition&amp;gt;
          &amp;lt;/done&amp;gt;
        &amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
      &amp;lt;table depends="$show_tab1$"&amp;gt;
        &amp;lt;title&amp;gt;Second table&amp;lt;/title&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;|makeresults|eval C_Category="Categ_2", C_endpoint="prime1", C_Response="00" |  table C_Category C_endpoint C_Response duration&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Any input other than &lt;CODE&gt;Categ_1&lt;/CODE&gt; will result in first table and second table only when Categ_1 in text box&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2019 05:42:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434454#M42492</guid>
      <dc:creator>renjith_nair</dc:creator>
      <dc:date>2019-03-08T05:42:16Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434455#M42493</link>
      <description>&lt;P&gt;Awesome @renjith.nair . It works. Is there alternate way to drive this using the dropdown values rather than the search query values?&lt;/P&gt;

&lt;P&gt;Also you mentioned about depends and rejects. How to use that approach?&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2019 05:51:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434455#M42493</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-03-08T05:51:09Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434456#M42494</link>
      <description>&lt;P&gt;@vnravikumar - Any further help is much appreciated.&lt;/P&gt;</description>
      <pubDate>Fri, 15 Mar 2019 03:12:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434456#M42494</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-03-15T03:12:08Z</dc:date>
    </item>
    <item>
      <title>Re: Dashboard conditional search not working</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434457#M42495</link>
      <description>&lt;P&gt;@renjith.nair  - Any further help is much appreciated. Looking for the conditional search on dropdown values rather than the search results.&lt;/P&gt;</description>
      <pubDate>Fri, 15 Mar 2019 03:13:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Dashboard-conditional-search-not-working/m-p/434457#M42495</guid>
      <dc:creator>nareshinsvu</dc:creator>
      <dc:date>2019-03-15T03:13:13Z</dc:date>
    </item>
  </channel>
</rss>

