Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Check Multiple conditions for different dropdown v...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I want to set a token value based on different dropdown values. eg:
<input type="dropdown" token="endpoint" searchWhenChanged="true">
<label>endpoint</label>
<choice value=“/abc”>/abc</choice>
<choice value=“/defb”>/def</choice>
<choice value=“/xyz”>/xyz</choice>
<default>/abc</default>
<initialValue>/abc</initialValue>
</input>
<input type="dropdown" token="environment" searchWhenChanged="true">
<label>environment</label>
<choice value="prod">prod</choice>
<choice value="ppe">pre-prod</choice>
<choice value="dev">dev</choice>
<default>prod</default>
<initialValue>prod</initialValue>
</input>
In this example,
1. I want to set a token(named as targetName) value to "employee" if the endpoint value is /def and environment is prod.
2. TargetName should be set to "address" for any other endpoint with environment value as prod.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@ankursaxena2020 you have given two conditions for Prod, what if environment is not Prod, how do you want to handle those conditions?
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@ankursaxena2020 you have given two conditions for Prod, what if environment is not Prod, how do you want to handle those conditions?
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@ankursaxena2020 seems like you accepted my question as answer by mistake. If your query is already resolved it is possibly based on Rich's answer. So accept his answer if no further queries!
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Try using condition.
<input type="dropdown" token="endpoint" searchWhenChanged="true">
<label>endpoint</label>
<choice value=“/abc”>/abc</choice>
<choice value=“/defb”>/def</choice>
<choice value=“/xyz”>/xyz</choice>
<default>/abc</default>
<initialValue>/abc</initialValue>
<condition match="match($endpoint$,"/def") AND match($environment$, "prod")">
<set token="targetName">employee</set>
</condition>
<condition match="NOT match($endpoint$,"/def") AND match($environment$, "prod")">
<set token="targetName">address</set>
</condition>
</input>
<input type="dropdown" token="environment" searchWhenChanged="true">
<label>environment</label>
<choice value="prod">prod</choice>
<choice value="ppe">pre-prod</choice>
<choice value="dev">dev</choice>
<default>prod</default>
<initialValue>prod</initialValue>
<condition match="match($endpoint$,"/def") AND match($environment$, "prod")">
<set token="targetName">employee</set>
</condition>
<condition match="NOT match($endpoint$,"/def") AND match($environment$, "prod")">
<set token="targetName">address</set>
</condition>
</input>
If this reply helps you, Karma would be appreciated.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Announcing Modern Navigation: A New Era of Splunk User Experience
Modernize your Splunk Apps – Introducing Python 3.13 in Splunk
Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...
