Trim braces from a token variable-Dynamic dashboards

rczone — Wed, 30 Sep 2020 03:25:35 GMT

Im creating link to different dashboards based on the application clicked on from the main form

So i have a variable $sig.team$ which is basically selecting team with token prefix as ( and suffix as )as these are needed for my search queries

so now im linking to different dashboards based on the team selected,,,so i have defined a custom url with parameters like below:

/app/search/$sigteam$_Events_TESTl?form.issuetype=$click.value$&form.time.earliest=$earliest$&form.time.latest=$latest$&form.sigteam=$sigteam$&form.host=*

but when i click that the $sigteam$ resolving to (TESTAPP) instead of TESTAPP because of pre-fix and suffix like below:

/app/search/(TESTAPP)_Events_TESTl?form.issuetype=$click.value$&form.time.earliest=$earliest$&form.time.latest=$latest$&form.sigteam=$sigteam$&form.host=*

But i need the output URL as :

/app/search/TESTAPP_Events_TESTl?form.issuetype=$click.value$&form.time.earliest=$earliest$&form.time.latest=$latest$&form.sigteam=$sigteam$&form.host=*

Any feedback is welcome...Please suggest how to trim these braces in this scenario

Re: Trim braces from a token variable-Dynamic dashboards

woodcock — Fri, 20 Dec 2019 21:27:24 GMT

Add this above the drilldown:

<eval token="sigteam">rtrim(ltrim($sigteam$, "("), ")")</eval>

topic Re: Trim braces from a token variable-Dynamic dashboards in Splunk Search

Trim braces from a token variable-Dynamic dashboards

Re: Trim braces from a token variable-Dynamic dashboards