Dashboards & Visualizations

Check Multiple conditions for different dropdown values

ankursaxena2020
Engager

I want to set a token value based on different dropdown values. eg:

<input type="dropdown" token="endpoint" searchWhenChanged="true">

    <label>endpoint</label>

    <choice value=“/abc”>/abc</choice>

    <choice value=“/defb”>/def</choice>

    <choice value=“/xyz”>/xyz</choice>

    <default>/abc</default>

    <initialValue>/abc</initialValue>

</input>

 

<input type="dropdown" token="environment" searchWhenChanged="true">

    <label>environment</label>

    <choice value="prod">prod</choice>

    <choice value="ppe">pre-prod</choice>

    <choice value="dev">dev</choice>

    <default>prod</default>

    <initialValue>prod</initialValue>

</input>

 

In this example,

1. I want to set a token(named as targetName) value to "employee" if the endpoint value is /def and environment is prod. 

2. TargetName should be set to "address" for any other endpoint with environment value as prod.

 

 

Labels (3)
0 Karma
1 Solution

niketn
Legend

@ankursaxena2020 you have given two conditions for Prod, what if environment is not Prod, how do you want to handle those conditions?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@ankursaxena2020 you have given two conditions for Prod, what if environment is not Prod, how do you want to handle those conditions?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

niketn
Legend

@ankursaxena2020 seems like you accepted my question as answer by mistake. If your query is already resolved it is possibly based on Rich's answer. So accept his answer if no further queries!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try using condition.

<input type="dropdown" token="endpoint" searchWhenChanged="true">
    <label>endpoint</label>
    <choice value=“/abc”>/abc</choice>
    <choice value=“/defb”>/def</choice>
    <choice value=“/xyz”>/xyz</choice>
    <default>/abc</default>
    <initialValue>/abc</initialValue>
    <condition match="match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">employee</set>
    </condition>
    <condition match="NOT match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">address</set>
    </condition>
</input>

<input type="dropdown" token="environment" searchWhenChanged="true">
    <label>environment</label>
    <choice value="prod">prod</choice>
    <choice value="ppe">pre-prod</choice>
    <choice value="dev">dev</choice>
    <default>prod</default>
    <initialValue>prod</initialValue>
    <condition match="match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">employee</set>
    </condition>
    <condition match="NOT match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">address</set>
    </condition>
</input>

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...