All Apps and Add-ons

Available $foo$ values?

BryanBerry
Path Finder

How can I find what $foo$ values are available?

I know the Sideview RuntimeDebugger shows keys from upstream and modified keys, but how can I see the full tree of keys?

This is to support something I'm trying to do using Redirector, but I feel like this question holds a good amount of value in and of itself. Once I have the answer, I can likely figure out my Redirector woes. If not, I'll just ask a separate question 🙂

0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

If the Runtime Debug mode of the Sideview Editor doesn't tell you a key is defined at a given point in the view, then it really isn't there.

There is a page at "Key Techniques > Other > Overview of all the $foo$ tokens", and this can help give you a broad overview of $foo$ tokens that you have at your disposal in various places and downstream from various modules.

UPDATE: It turned out that the culprit was the confusing switch where Sideview Utils gives the SimpleResultsTable keys like "$click.fields.myField$", but Sideview's own Table module has a key prefix of "row", so the same token down from a Table would be "$row.fields.myField$".

(You can change this by setting the "name" param on Table to something else. It just defaults to "row").

View solution in original post

sideview
SplunkTrust
SplunkTrust

If the Runtime Debug mode of the Sideview Editor doesn't tell you a key is defined at a given point in the view, then it really isn't there.

There is a page at "Key Techniques > Other > Overview of all the $foo$ tokens", and this can help give you a broad overview of $foo$ tokens that you have at your disposal in various places and downstream from various modules.

UPDATE: It turned out that the culprit was the confusing switch where Sideview Utils gives the SimpleResultsTable keys like "$click.fields.myField$", but Sideview's own Table module has a key prefix of "row", so the same token down from a Table would be "$row.fields.myField$".

(You can change this by setting the "name" param on Table to something else. It just defaults to "row").

Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...