topic Re: Why don't my dynamic titles for month names work? in Splunk Search

Why don't my dynamic titles for month names work?

c0rrinn3 — Fri, 01 Dec 2017 22:46:49 GMT

I have tried to pass a token into a panel title from a search that creates month names for last month and the month before that. I have tried using CDATA and just $xxxx$ in the title. Hellllp!

Re: Why don't my dynamic titles for month names work?

woodcock — Sat, 02 Dec 2017 03:19:17 GMT

Post your XML. This is totally doable and you are probably missing something very basic.

Re: Why don't my dynamic titles for month names work?

woodcock — Sat, 02 Dec 2017 03:41:06 GMT

Check out this app:
https://splunkbase.splunk.com/app/1603/

Re: Why don't my dynamic titles for month names work?

martin_mueller — Sat, 02 Dec 2017 18:29:47 GMT

No need for a search to do that:

<form>
  <init>
    <eval token="last_month">strftime(relative_time(time(), "-1mon"), "%b")</eval>
  </init>
  <row>
    <panel>
      <title>$last_month$</title>
    </panel>
  </row>
</form>

Re: Why don't my dynamic titles for month names work?

c0rrinn3 — Tue, 05 Dec 2017 17:48:02 GMT

I can post my code but, the code above doesnt work for me either. Odd??

Re: Why don't my dynamic titles for month names work?

niketn — Tue, 05 Dec 2017 18:51:32 GMT

@c0rrinn3,

Which version of Splunk Are you on?
section in Simple XML Dashboard is available from Splunk Enterprise 6.5 onward.

Are you adding token to title from UI Panel Edit or Simple XML code?
If you add from UI Panel Edit then $ sign for token will escape as $$ and it will be treated as string rather than token.

Kindly share you current code which is not working and your Splunk Enteprise version as well.

Re: Why don't my dynamic titles for month names work?

c0rrinn3 — Tue, 05 Dec 2017 19:34:07 GMT

I am on Enterprise 6.4. I have tried a different code also and have combined both in the following example. The example I found with the giraffe works but I cant get it to generate previous month.

TimeTestTakeThree

 <input type="text" token="newname">       
   <label>labelrino</label>
   <default>giraffe</default>       
   <change>         
     <eval token="Ucase">upper('value')</eval>
   <eval token="leno">len('value')</eval>
   </change>



 <html>
   <p>Raw Entry: <b>$newname$</b></p>
   <p>Upper(raw):<b>$Ucase$</b></p>
  <p>Length(raw): <b>$leno$</b></p>
</html>



 <eval token="last_month">strftime(relative_time(time(), "-1mon"), "%b")</eval>


 <panel>
   <title>$last_month$</title>
 </panel>

Re: Why don't my dynamic titles for month names work?

c0rrinn3 — Tue, 05 Dec 2017 19:35:28 GMT

That example I posted isnt the one I meant to post. the bottom panel should be the one from above.

Re: Why don't my dynamic titles for month names work?

c0rrinn3 — Tue, 29 Sep 2020 17:05:43 GMT

I got it to work but it uses input time. The time will always be -1mon and -2mon. How can I hide that so its not seen?

test

strftime(relative_time(time(), "-1mon"), "%B %Y")
strftime(relative_time(time(), "-2mon"), "%B %Y")

<panel>
   <html> <p><center> <b><font size="5">$last_month$ Count</font></b></center></p></html>
</panel>
<panel>
  <html>   <p><center> <b><font size="5">$twoMonths$ Count</font></b></center></p> </html>
</panel>