topic Re: Splunk Classic Dashboard - Prevent trigger of <change> on first load in Dashboards & Visualizations

Splunk Classic Dashboard - Prevent trigger of on first load

dmoberg — Mon, 03 Feb 2025 17:32:25 GMT

In my dashboard, when one of the dropdowns are changed I need to reset the value in the other dropdowns to the default value (*); this can easily be done using the <change> function so no issues there. The problem arises when the user clicks a link to the dashboard with pre-populated parameters for the dropdowns (user is taken to a specific state of the dropdowns). The loading of the dashboard with the incoming HTTP parameters for the dropdowns also trigger the <change> to happen and thus resetting all of the selected dropdowns.

My questions is, how can I prevent the <change> to trigger on the Initial Load of the Dashboard? Once the Dashboard has been loaded I want the <change> to trigger when the user changes certain dropdowns.

I tried the following approach. In the dropdown for which I want to prevent the <change> to trigger a condition was added to check that the Token $FirstLoad$ is set to "Done".

In the heaviest Search I set a Token when completed (Done):
<done>
<set token="FirstLoad">Done</set>
</done>

The thinking for the above was that since on Initial Load the $FirstLoad$ Token will not initially be set which should prevent the <change> to trigger, but as soon as the $FirstLoad$ Token is updated to "Done", the <change> is triggered. Very frustrating.

Anyways, maybe I am missing something simple? Any ideas are appreciated.

Re: Splunk Classic Dashboard - Prevent trigger of on first load

gcusello — Tue, 04 Feb 2025 08:33:53 GMT

Hi @dmoberg ,

see if this my old answer solves your requirement: https://community.splunk.com/t5/Dashboards-Visualizations/How-to-clear-reset-the-value-of-a-token/td-p/601208

Ciao.

Giuseppe

Re: Splunk Classic Dashboard - Prevent trigger of on first load

dmoberg — Tue, 04 Feb 2025 08:41:16 GMT

@gcusello, thanks but we need this to be automatically happening. It has to be some way to fix this?

Re: Splunk Classic Dashboard - Prevent trigger of on first load

gcusello — Tue, 04 Feb 2025 09:30:03 GMT

Hi @dmoberg ,

for my knowledge, this is the only solution, no automatic.

Ciao.

Giuseppe

Re: Splunk Classic Dashboard - Prevent trigger of on first load

dmoberg — Fri, 07 Feb 2025 08:08:58 GMT

I was able to solve it.

By populating the dropdowns in the Dashboard from an Inputlookup (with data from a scheduled search), it started working to use the approach I detailed below (setting the FirstLoad Token). Not sure exactly why this made it work but at least it works.

Re: Splunk Classic Dashboard - Prevent trigger of on first load

gcusello — Fri, 07 Feb 2025 08:32:14 GMT

Hi @dmoberg ,

good for you, see next time!

let me know if I can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉