Dashboards & Visualizations

Check Multiple conditions for different dropdown values

ankursaxena2020
Engager

I want to set a token value based on different dropdown values. eg:

<input type="dropdown" token="endpoint" searchWhenChanged="true">

    <label>endpoint</label>

    <choice value=“/abc”>/abc</choice>

    <choice value=“/defb”>/def</choice>

    <choice value=“/xyz”>/xyz</choice>

    <default>/abc</default>

    <initialValue>/abc</initialValue>

</input>

 

<input type="dropdown" token="environment" searchWhenChanged="true">

    <label>environment</label>

    <choice value="prod">prod</choice>

    <choice value="ppe">pre-prod</choice>

    <choice value="dev">dev</choice>

    <default>prod</default>

    <initialValue>prod</initialValue>

</input>

 

In this example,

1. I want to set a token(named as targetName) value to "employee" if the endpoint value is /def and environment is prod. 

2. TargetName should be set to "address" for any other endpoint with environment value as prod.

 

 

Labels (3)
0 Karma
1 Solution

niketn
Legend

@ankursaxena2020 you have given two conditions for Prod, what if environment is not Prod, how do you want to handle those conditions?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@ankursaxena2020 you have given two conditions for Prod, what if environment is not Prod, how do you want to handle those conditions?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

niketn
Legend

@ankursaxena2020 seems like you accepted my question as answer by mistake. If your query is already resolved it is possibly based on Rich's answer. So accept his answer if no further queries!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try using condition.

<input type="dropdown" token="endpoint" searchWhenChanged="true">
    <label>endpoint</label>
    <choice value=“/abc”>/abc</choice>
    <choice value=“/defb”>/def</choice>
    <choice value=“/xyz”>/xyz</choice>
    <default>/abc</default>
    <initialValue>/abc</initialValue>
    <condition match="match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">employee</set>
    </condition>
    <condition match="NOT match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">address</set>
    </condition>
</input>

<input type="dropdown" token="environment" searchWhenChanged="true">
    <label>environment</label>
    <choice value="prod">prod</choice>
    <choice value="ppe">pre-prod</choice>
    <choice value="dev">dev</choice>
    <default>prod</default>
    <initialValue>prod</initialValue>
    <condition match="match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">employee</set>
    </condition>
    <condition match="NOT match($endpoint$,&quot;/def&quot;) AND match($environment$, &quot;prod&quot;)">
      <set token="targetName">address</set>
    </condition>
</input>

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...