All Apps and Add-ons

search does not work in dasboard when i change drop down value

vikashperiwal
Path Finder

HI ,

I have a search for panel where i have passed token and the query in set in the xml .

problem i am facing is when i change any drop down value the panel is not getting the updated search.

Query

<input type="time" token="time" searchWhenChanged="false">
  <label>Time Selection</label>
  <default>
    <earliest>-3d@d</earliest>
    <latest>now</latest>
  </default>
</input>
<input type="dropdown" token="span" searchWhenChanged="true">
  <label>Aggregation Interval</label>
  <choice value="5m">5 minutes</choice>
  <choice value="10m">10 minutes</choice>
  <choice value="15m">15 minutes</choice>
  <choice value="30m">30 minutes</choice>
  <choice value="60m">1 hour</choice>
  <choice value="1d">1 day</choice>
  <default>15m</default>

</input>
<input type="dropdown" token="pgw" searchWhenChanged="false">
  <label>Packet Gateway</label>
  <choice value="ABBRLW-IOTEPC-01">ABBRLW-IOTEPC-01</choice>
  <choice value="BCGLMR-IOTEPC-01">BCGLMR-IOTEPC-01</choice>
  <choice value="ONHOOD-IOTEPC-01">ONHOOD-IOTEPC-01</choice>
  <choice value="PQPTFD-IOTEPC-01">PQPTFD-IOTEPC-01</choice>
  <choice value="PQPTFD-IOTEPC-02">PQPTFD-IOTEPC-02</choice>
  <choice value="WNPGMBAB-SPGW-01">WNPGMBAB-SPGW-01</choice>
  <choice value="WNPGMBAB-SPGW-02">WNPGMBAB-SPGW-02</choice>

`` ABBRLW-IOTEPC-01

<panel>
  <input type="radio" token="network_context" searchWhenChanged="true">
    <label>Source</label>
    <choice value="APNCALLPERFSTATSGRID">APNCALLPERFSTATSGRID</choice>
    <choice value="SGWAPNCALLPERFSTATSGRID">SGWAPNCALLPERFSTATSGRID</choice>
    <choice value="SGWCALLPERFSTATSGRID">SGWCALLPERFSTATSGRID</choice>
    <fieldForLabel>Filename</fieldForLabel>
    <fieldForValue>Filename</fieldForValue>
    <change>
      <condition value="APNCALLPERFSTATSGRID">
        <set token="network_context1">index=affirmed host=$pgw$ source=*APNCALLPERFSTATSGRID* apn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci1+NumTotalBearersSetupFailQci1)
                  | eval Success = NumTotalBearersSetupSuccessQci1
                  | eval Reject = NumTotalBearersSetupFailQci1
                  | eval Current = NumCurrentBearersQci1
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by host</set>
        <set token="network_context2">index=affirmed host=$pgw$ source=*APNCALLPERFSTATSGRID*  apn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci5+NumTotalBearersSetupFailQci5)
                  | eval Success = NumTotalBearersSetupSuccessQci5
                  | eval Reject = NumTotalBearersSetupFailQci5
                  | eval Current = NumCurrentBearersQci5
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by host</set>

      </condition>
      <condition value="SGWAPNCALLPERFSTATSGRID">
        <set token="network_context1">index=affirmed host=$pgw$ source=*SGWAPNCALLPERFSTATSGRID* sgwApn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci1+NumTotalBearersSetupFailQci1)
                  | eval Success = NumTotalBearersSetupSuccessQci1
                  | eval Reject = NumTotalBearersSetupFailQci1
                  | eval Current = NumCurrentBearersQci1
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by sgwApn_name</set>
        <set token="network_context2">index=affirmed host=$pgw$ source=*SGWAPNCALLPERFSTATSGRID* sgwApn_name=*ims*
                  | eval Attempt = (NumTotalBearersSetupSuccessQci5+NumTotalBearersSetupFailQci5)
                  | eval Success = NumTotalBearersSetupSuccessQci5
                  | eval Reject = NumTotalBearersSetupFailQci5
                  | eval Current = NumCurrentBearersQci5
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | eval FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | eval SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by sgwApn_name</set>
      </condition>
      <condition value="SGWCALLPERFSTATSGRID">
        <set token="network_context1">index=affirmed host=$pgw$ source=*SGWCALLPERFSTATSGRID* 
                  | eval Attempt = (NumTotalBearersSetupSuccessQci1+NumTotalBearersSetupFailQci1)
                  | eval Success = NumTotalBearersSetupSuccessQci1
                  | eval Reject = NumTotalBearersSetupFailQci1
                  | eval Current = NumCurrentBearersQci1
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current"  by host</set>
        <set token="network_context2">index=affirmed  source=*SGWCALLPERFSTATSGRID* 
                  | eval Attempt = (NumTotalBearersSetupSuccessQci5+NumTotalBearersSetupFailQci5)
                  | eval Success = NumTotalBearersSetupSuccessQci5
                  | eval Reject = NumTotalBearersSetupFailQci5
                  | eval Current = NumCurrentBearersQci5
                  | eval FR = if(isnull((Attempt-Success)/Attempt*100),0,(Attempt-Success)/Attempt*100)
                  | where FR >=0
                  | eval SR = if(isnull((Attempt-Reject)/Attempt*100),0,(Attempt-Reject)/Attempt*100)
                  | where SR <=100
                  | timechart span=$span$ avg(FR) as "Failure Rate", avg(SR) as  "Success Rate", avg(Current) as "Current" by host</set>
      </condition>

    </change>
  </input>
</panel>


<panel>
  <chart>
    <title>Dedicated QCI1 Bearers(IMS APN) : $network_context$</title>
    <search>
      **<query>$tab_bearers$    $network_context1$</query>**
      <earliest>$time.earliest$</earliest>
      <latest>$time.latest$</latest>
    </search>

  </chart>
</panel>
0 Karma

vikashperiwal
Path Finder

Well .. It was after 3 days i could get a quick and simpe fix to the above problem, i just use set and unset command to hide the panle and get the desired output .. it works now. Thanks

0 Karma

niketn
Legend

@vikashperiwal, you have searchWhenChanged="false" for dropdown pgw. Is that the token which is not working? Set it to "true". Also, some piece of your code did not get posted correctly. Please add four spaces before each line or use the code button (101010 or shortcut Ctrl + K).

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Best Strategies to Optimize Observability Costs

 Join us on Tuesday, May 6, 2025, at 11 AM PDT / 2 PM EDT for an insightful session on optimizing ...

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...