topic Re: passing two tokens using simple xml in Dashboards & Visualizations

passing two tokens using simple xml

himynamesdave — Wed, 29 Jan 2014 15:48:50 GMT

<drilldown> <link>manual_search-verification?form.index="$index$"&field="$field$"</link> </drilldown>

I am trying to pass two tokens using a drilldown on a table object.

Splunk will not let me pass two tokens using an & operator (see code) - I get an XML syntax error (says it is expecting [;]... not sure how to implement this)

How should I be writing this query?

Thanks for the help all!

Re: passing two tokens using simple xml

himynamesdave — Wed, 29 Jan 2014 16:22:10 GMT

OK I've solved this myself, hope it helps someone else out too...

So instead of using "&" to join the query use "&". For example:

<link>view?form.index="$index$"&field="$field$"</link>

NOT:

<link>view?form.index="$index$"&field="$field$"</link>

Re: passing two tokens using simple xml

marciniega — Sun, 08 Jan 2017 23:49:47 GMT

Old post, but this helped me out. Thanks for checking back in!

Re: passing two tokens using simple xml

lguinn2 — Thu, 12 Jan 2017 19:14:12 GMT

You could also use CDATA to enclose text that you don't want to be processed as XML, like this

<link><![CDATA[view?form.index="$index$"&field="$field$"]]></link>

Re: passing two tokens using simple xml

marciniega — Thu, 12 Jan 2017 19:46:05 GMT

Also helpful, thank you!

Re: passing two tokens using simple xml

rroberts — Fri, 13 Jan 2017 16:32:19 GMT

CDATA block is the way to go I think. Much easier.