Hi All
I wanted to build a dashboard that displays some panels only depending on the selection for the drilldown. My approach was the following, but for some reason the condition match is not generating any tokens.
Thanks in advance for your help!
...
<row>
<panel>
<chart>
<search>
<query>index=myindex | timechart count by type</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>
<drilldown>
<condition match="$click.name2$ == type_1">
<set token="mytoken1">true</set>
<unset token="mytoken2"></unset>
</condition>
<condition match="$click.name2$ == type_2">
<set token="mytoken2">true</set>
<unset token="mytoken1"></unset>
</condition>
</drilldown>
<option name="charting.chart">line</option>
<option name="charting.drilldown">all</option>
<...>
</chart>
</panel>
<row>
<panel depends="$mytoken1$">
...
</panel>
</row>
<row>
<panel depends="$mytoken2$">
...
</panel>
</row>
'click.name2' == "type_2"
I've had mixed results using $ for tokens. Use single quotes instead. You also need encoded quotes for the literal value.
'click.name2' == "type_2"
I've had mixed results using $ for tokens. Use single quotes instead. You also need encoded quotes for the literal value.
Note for those that are trying to use 'trellis.name' or 'trellis.value'. It doesn't work at the moment (Splunk 7.0.2).