topic How to concatenate multiple tokens and set the combined token in drilldown for automatic search in Dashboards & Visualizations

How to concatenate multiple tokens and set the combined token in drilldown for automatic search

mandlikarbaaz — Sat, 07 Sep 2024 23:10:44 GMT

Hi,

I have a requirement to perform end to search for troubleshooting in a dashboard.

I am using multiple tokens inside the dashboard.

Some tokens have a condition to be set or unset depending upon null values.

However, if any of the tokens are not null, then I should concatenate the tokens and pass the combined token to the other sub searches.

Note: There is always a token which is not null

I tried but the other panels always say 'search is waiting for the input'

Below is a sample snippet from the xml dashboard.

<search><query>index=foo</query></search> <drilldown> <eval "combined">$token1$. .$token2$. .$token3$. .$token4$. $token5$</eval> <set "combined_token">$combined$</set> </drilldown> <panel> <search><query>index=abc $combined_token$</query></search> </panel>

Re: How to concatenate multiple tokens and set the combined token in drilldown for automatic search

richgalloway — Sun, 08 Sep 2024 00:26:43 GMT

All tokens in a search must have a non-null value before the search will run.

Try setting the null tokens to empty strings ("") before the search.

Re: How to concatenate multiple tokens and set the combined token in drilldown for automatic search

dural_yyz — Mon, 09 Sep 2024 18:03:40 GMT

Put "$combined_token$" in the title or description of the first panel. You can then see what is populating the token you depend upon. Also I'm curious about your current eval, I would have opted to make the spaces literal characters or only put in a single concatenation character between tokens.

<eval "combined">$token1$. .$token2$. .$token3$. .$token4$. $token5$</eval>
I would try
<eval "combined">$token1$." ".$token2$." ".$token3$." ".$token4$." ".$token5$</eval>
or
<eval "combined">$token1$.$token2$.$token3$.$token4$.$token5$</eval>