Dashboards & Visualizations

Can I map a drop-down token to two different values in different panels?

michael_wong
Path Finder

Deleted

Labels (2)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

No and yes - you can't map to more than one value, but you could use the change event handler to evaluate two tokens based on the value selected. Note that you can do this in Classic Dashboards, but I am not sure this feature is available in Studio yet.

0 Karma

michael_wong
Path Finder

Thanks for your reply. Yes, can use event handler, but it will quite complex as each token need to much on every panel. If I have 10 tokens and 6 panels. I will need to write 10*6 queries. Is there any effective way to achieve this? 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

If you need 60 tokens, you need 60 tokens.

Having said that, you could just have 10 tokens and let the panel find the part of the token that is relevant to it.

You might be able to put this into a macro to ensure consistency.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...