Dashboards & Visualizations

Can I use tokens in a search from another search results?

YuliyaVassilyev
Explorer

I have two panels - Network panel and Details panel - and a text input. My Details panel loads based on the results from my text input. What I would like to do is to create a token for the results in the Details panel, and then load the Network Panel with the matching values from the Details Panel. 

My text input token is text_token, and I created a token for the Details Panel:

<done>
<set token="result_token">$result.my_field$</set>
</done>

Appreciate any help! Thank you.

Labels (2)
0 Karma

renjith_nair
Legend

Of course you can use token from a different search result.

However, if you are setting the token as result.field, you can get only the result of the first row in the token.

Reference : Tokens 

Alternatively, you may use drilldown on the result set to make it depend on any row

Reference : Use drilldown for dashboard interactivity 

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...