<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Filter tokens based on Row depends and Row Rejects in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680304#M55717</link>
    <description>&lt;P&gt;Who told you to create a new token?&lt;/P&gt;&lt;P&gt;What problem are you trying to solve?&amp;nbsp; I think I need a bigger picture so I understand what is happening and how to get it to work.&lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2024 16:25:58 GMT</pubDate>
    <dc:creator>richgalloway</dc:creator>
    <dc:date>2024-03-11T16:25:58Z</dc:date>
    <item>
      <title>Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680178#M55691</link>
      <description>&lt;P&gt;Hey Experts,&lt;BR /&gt;&lt;BR /&gt;I am encountering an issue&amp;nbsp; with using filter tokens in specific row on my dashboard. I have two filters named&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;ABC&lt;/STRONG&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;and&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;STRONG&gt;DEF,&amp;nbsp;&lt;/STRONG&gt;tokens represented for ABC is&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF0000"&gt;$abc$&lt;/FONT&gt;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;and DEF is&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;FONT color="#FF0000"&gt;$def$.&amp;nbsp;&lt;FONT color="#000000"&gt;&lt;BR /&gt;&lt;BR /&gt;&lt;/FONT&gt;&lt;FONT color="#000000"&gt;I want to pass these tokens only to one specific row, while for others, I want to reject them.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;For the rows where i need to pass the tokens, I've used the following syntax:&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;PRE&gt;&amp;lt;row depends="$abc$ $def$"&amp;gt;&amp;lt;/row&amp;gt;&lt;/PRE&gt;&lt;P&gt;&lt;FONT color="#FF0000"&gt;&lt;FONT color="#000000"&gt;For the row where i don't want to use the token, I've used the following syntax;&lt;SPAN&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;PRE&gt;&amp;lt;row rejects="$abc$ $def$"&amp;gt;&amp;lt;/row&amp;gt;.&lt;/PRE&gt;&lt;P&gt;&lt;FONT color="#FF0000"&gt;&lt;FONT color="#000000"&gt;&lt;BR /&gt;&lt;BR /&gt;However when i use the rejects condition, the rows are hidden. I want these rows to still be visible.&lt;BR /&gt;&lt;SPAN&gt;&lt;BR /&gt;Any help or example queries would be greatly appreciated. Thank You!&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;/P&gt;</description>
      <pubDate>Sat, 09 Mar 2024 17:48:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680178#M55691</guid>
      <dc:creator>Muthu_Vinith</dc:creator>
      <dc:date>2024-03-09T17:48:48Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680180#M55693</link>
      <description>&lt;P&gt;The &lt;FONT face="courier new,courier"&gt;depends&lt;/FONT&gt; and &lt;FONT face="courier new,courier"&gt;rejects&lt;/FONT&gt; options control visibility of the element.&amp;nbsp; That is the only function of the options.&amp;nbsp; To use a token in an element, just invoke the token name within the element.&amp;nbsp; There is no need to "declare" the token as one might in a programming language.&lt;/P&gt;</description>
      <pubDate>Sat, 09 Mar 2024 22:14:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680180#M55693</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-03-09T22:14:36Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680219#M55703</link>
      <description>&lt;P&gt;Note that depends and rejects take a comma separated list of tokens, not a space separated list.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2024 23:26:33 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680219#M55703</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2024-03-10T23:26:33Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680220#M55704</link>
      <description>&lt;P&gt;Yeah the tokens are in comma separated, but the only thing is when i use rejects condition the rows&amp;nbsp; are hidden. How to fix that?&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/6367"&gt;@bowesmana&lt;/a&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2024 23:34:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680220#M55704</guid>
      <dc:creator>Muthu_Vinith</dc:creator>
      <dc:date>2024-03-10T23:34:56Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680221#M55705</link>
      <description>&lt;P&gt;That's the way &lt;FONT face="courier new,courier"&gt;rejects&lt;/FONT&gt; works.&amp;nbsp; When the token has a value, the element is hidden.&amp;nbsp; To make the element always visible, remove the &lt;FONT face="courier new,courier"&gt;rejects&lt;/FONT&gt; option.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 00:10:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680221#M55705</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-03-11T00:10:29Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680261#M55710</link>
      <description>&lt;P&gt;Is there any ways to create a new token where i can pass it to filters &lt;STRONG&gt;(i.e ABC and DEF)&lt;/STRONG&gt; and rows?&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/6367"&gt;@bowesmana&lt;/a&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 09:41:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680261#M55710</guid>
      <dc:creator>Muthu_Vinith</dc:creator>
      <dc:date>2024-03-11T09:41:40Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680293#M55714</link>
      <description>&lt;P&gt;In Advanced XML, all tokens are global in scope so there is no need to "pass" them.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 14:44:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680293#M55714</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-03-11T14:44:41Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680298#M55716</link>
      <description>&lt;P&gt;So how can i use &amp;lt;change&amp;gt; condition in my case. Any example queries would be greatly appreciated&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;. They told to create a new token and pass it to filter and row.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 15:20:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680298#M55716</guid>
      <dc:creator>Muthu_Vinith</dc:creator>
      <dc:date>2024-03-11T15:20:45Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680304#M55717</link>
      <description>&lt;P&gt;Who told you to create a new token?&lt;/P&gt;&lt;P&gt;What problem are you trying to solve?&amp;nbsp; I think I need a bigger picture so I understand what is happening and how to get it to work.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 16:25:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680304#M55717</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-03-11T16:25:58Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680306#M55718</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;.Please check your inbox&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 16:47:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680306#M55718</guid>
      <dc:creator>Muthu_Vinith</dc:creator>
      <dc:date>2024-03-11T16:47:21Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680325#M55719</link>
      <description>&lt;P class="lia-indent-padding-left-30px"&gt;I'm having 5 filters in that, I've two filters called group and class for group token=$group$ and for class=$class$.&lt;BR /&gt;For group and class filters only one specific row that is &lt;STRONG&gt;SQL&amp;nbsp;&lt;/STRONG&gt;having values, others rows does not have values. if i pass token $class$ and $group$ in &lt;STRONG&gt;SQL. &lt;/STRONG&gt;I'm getting results, but when i pass these tokens to other rows, it will be&lt;STRONG&gt; zero, &lt;/STRONG&gt;because there is no values for class and group&lt;STRONG&gt;.&lt;/STRONG&gt;&amp;nbsp;&lt;BR /&gt;But i want to show other rows also but&lt;STRONG&gt; $class$ and $group$&lt;/STRONG&gt; token should be rejected because other filter having values for these rows also. So only i'm asking we can use depends or rejects. Please I need your help to solve this.&lt;/P&gt;&lt;P&gt;The depends and rejects options control the layout of the dashboard; they have no effect on the content of the dashboard panels.&lt;/P&gt;&lt;P&gt;Can you share the code in which the tokens are being used?&amp;nbsp; That may help with my understanding of the problem and allow me to make a useful suggestion.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2024 19:23:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680325#M55719</guid>
      <dc:creator>richgalloway</dc:creator>
      <dc:date>2024-03-11T19:23:46Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680338#M55721</link>
      <description>&lt;P&gt;I've used tokens in the base search itself. Except class and group filter. I need to enable these two tokens for &lt;STRONG&gt;SQL &lt;/STRONG&gt;row and need to disable it for others.&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2024 03:08:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680338#M55721</guid>
      <dc:creator>Muthu_Vinith</dc:creator>
      <dc:date>2024-03-12T03:08:14Z</dc:date>
    </item>
    <item>
      <title>Re: Filter tokens based on Row depends and Row Rejects</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680346#M55722</link>
      <description>&lt;P&gt;You are only providing keyholes into your problem domain - we need to understand the bigger picture as&amp;nbsp;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/213957"&gt;@richgalloway&lt;/a&gt;&amp;nbsp;says to understand what your problem is.&lt;/P&gt;&lt;P&gt;Can you provide your existing XML and/or searches showing the fields you are querying - please ensure the data is sanitised, so it can be posted here.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2024 05:46:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Filter-tokens-based-on-Row-depends-and-Row-Rejects/m-p/680346#M55722</guid>
      <dc:creator>bowesmana</dc:creator>
      <dc:date>2024-03-12T05:46:24Z</dc:date>
    </item>
  </channel>
</rss>

