Dashboards & Visualizations

Can I use tokens in a search from another search results?

YuliyaVassilyev
Explorer

I have two panels - Network panel and Details panel - and a text input. My Details panel loads based on the results from my text input. What I would like to do is to create a token for the results in the Details panel, and then load the Network Panel with the matching values from the Details Panel. 

My text input token is text_token, and I created a token for the Details Panel:

<done>
<set token="result_token">$result.my_field$</set>
</done>

Appreciate any help! Thank you.

Labels (2)
0 Karma

renjith_nair
Legend

Of course you can use token from a different search result.

However, if you are setting the token as result.field, you can get only the result of the first row in the token.

Reference : Tokens 

Alternatively, you may use drilldown on the result set to make it depend on any row

Reference : Use drilldown for dashboard interactivity 

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...