All Apps and Add-ons

search does not work in dasboard when i change drop down value

vikashperiwal
Path Finder

HI ,

I have a search for panel where i have passed token and the query in set in the xml .

problem i am facing is when i change any drop down value the panel is not getting the updated search.

Query

<input type="time" token="time" searchWhenChanged="false">
  <label>Time Selection</label>
  <default>
    <earliest>-3d@d</earliest>
    <latest>now</latest>
  </default>
</input>
<input type="dropdown" token="span" searchWhenChanged="true">
  <label>Aggregation Interval</label>
  <choice value="5m">5 minutes</choice>
  <choice value="10m">10 minutes</choice>
  <choice value="15m">15 minutes</choice>
  <choice value="30m">30 minutes</choice>
  <choice value="60m">1 hour</choice>
  <choice value="1d">1 day</choice>
  <default>15m</default>

</input>
<input type="dropdown" token="pgw" searchWhenChanged="false">
  <label>Packet Gateway</label>
  <choice value="ABBRLW-IOTEPC-01">ABBRLW-IOTEPC-01</choice>
  <choice value="BCGLMR-IOTEPC-01">BCGLMR-IOTEPC-01</choice>
  <choice value="ONHOOD-IOTEPC-01">ONHOOD-IOTEPC-01</choice>
  <choice value="PQPTFD-IOTEPC-01">PQPTFD-IOTEPC-01</choice>
  <choice value="PQPTFD-IOTEPC-02">PQPTFD-IOTEPC-02</choice>
  <choice value="WNPGMBAB-SPGW-01">WNPGMBAB-SPGW-01</choice>
  <choice value="WNPGMBAB-SPGW-02">WNPGMBAB-SPGW-02</choice>

`` ABBRLW-IOTEPC-01

<panel>
  <input type="radio" token="network_context" searchWhenChanged="true">
    <label>Source</label>
    <choice value="APNCALLPERFSTATSGRID">APNCALLPERFSTATSGRID</choice>
    <choice value="SGWAPNCALLPERFSTATSGRID">SGWAPNCALLPERFSTATSGRID</choice>
    <choice value="SGWCALLPERFSTATSGRID">SGWCALLPERFSTATSGRID</choice>
    <fieldForLabel>Filename</fieldForLabel>
    <fieldForValue>Filename</fieldForValue>
    <change>
      <condition value="APNCALLPERFSTATSGRID">
        <set token="network_context1">index=affirmed host=$pgw$ source=*APNCALLPERFSTATSGRID* apn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci1+NumTotalBearersSetupFailQci1)
                  | eval Success = NumTotalBearersSetupSuccessQci1
                  | eval Reject = NumTotalBearersSetupFailQci1
                  | eval Current = NumCurrentBearersQci1
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by host</set>
        <set token="network_context2">index=affirmed host=$pgw$ source=*APNCALLPERFSTATSGRID*  apn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci5+NumTotalBearersSetupFailQci5)
                  | eval Success = NumTotalBearersSetupSuccessQci5
                  | eval Reject = NumTotalBearersSetupFailQci5
                  | eval Current = NumCurrentBearersQci5
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by host</set>

      </condition>
      <condition value="SGWAPNCALLPERFSTATSGRID">
        <set token="network_context1">index=affirmed host=$pgw$ source=*SGWAPNCALLPERFSTATSGRID* sgwApn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci1+NumTotalBearersSetupFailQci1)
                  | eval Success = NumTotalBearersSetupSuccessQci1
                  | eval Reject = NumTotalBearersSetupFailQci1
                  | eval Current = NumCurrentBearersQci1
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by sgwApn_name</set>
        <set token="network_context2">index=affirmed host=$pgw$ source=*SGWAPNCALLPERFSTATSGRID* sgwApn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci5+NumTotalBearersSetupFailQci5)
                  | eval Success = NumTotalBearersSetupSuccessQci5
                  | eval Reject = NumTotalBearersSetupFailQci5
                  | eval Current = NumCurrentBearersQci5
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | eval FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | eval SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by sgwApn_name</set>
      </condition>
      <condition value="SGWCALLPERFSTATSGRID">
        <set token="network_context1">index=affirmed host=$pgw$ source=*SGWCALLPERFSTATSGRID* 
                  | eval Attempt = (NumTotalBearersSetupSuccessQci1+NumTotalBearersSetupFailQci1)
                  | eval Success = NumTotalBearersSetupSuccessQci1
                  | eval Reject = NumTotalBearersSetupFailQci1
                  | eval Current = NumCurrentBearersQci1
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current"  by host</set>
        <set token="network_context2">index=affirmed  source=*SGWCALLPERFSTATSGRID* 
                  | eval Attempt = (NumTotalBearersSetupSuccessQci5+NumTotalBearersSetupFailQci5)
                  | eval Success = NumTotalBearersSetupSuccessQci5
                  | eval Reject = NumTotalBearersSetupFailQci5
                  | eval Current = NumCurrentBearersQci5
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by host</set>
      </condition>

    </change>
  </input>
</panel>


<panel>
  <chart>
    <title>Dedicated QCI1 Bearers(IMS APN) : $network_context$</title>
    <search>
      **<query>$tab_bearers$    $network_context1$</query>**
      <earliest>$time.earliest$</earliest>
      <latest>$time.latest$</latest>
    </search>

  </chart>
</panel>
0 Karma

vikashperiwal
Path Finder

Well .. It was after 3 days i could get a quick and simpe fix to the above problem, i just use set and unset command to hide the panle and get the desired output .. it works now. Thanks

0 Karma

niketn
Legend

@vikashperiwal, you have searchWhenChanged="false" for dropdown pgw. Is that the token which is not working? Set it to "true". Also, some piece of your code did not get posted correctly. Please add four spaces before each line or use the code button (101010 or shortcut Ctrl + K).

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Video | Welcome Back to Smartness, Pedro

Remember Splunk Community member, Pedro Borges? If you tuned into Episode 2 of our Smartness interview series, ...

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...

Expert Tips from Splunk Education, Observability in Action, Plus More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...