Dashboards & Visualizations

Conditional for hidden panels

JoshuaJohn
Contributor

When I click one of my panels it shows another one, I want to be able to click that original panel and re-hide the panel that is now showing.

I tried doing something like this, but couldn't get it working.

<drilldown>
  <condition NotinUse !=="true">
    <set token="NotinUse">true</set>
  </condition>
  <condition NotinUse=="true">
    <set token="NotinUse">"false"</set>
  </condition>
</drilldown>
0 Karma
1 Solution

niketn
Legend

@JosuaJohn... Please try the following:

    <drilldown>
      <condition match="$NotinUse$==&quot;true&quot;">
        <unset token="NotinUse"></unset>
      </condition>
      <condition>
        <set token="NotinUse">true</set>
      </condition>
    </drilldown>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@JosuaJohn... Please try the following:

    <drilldown>
      <condition match="$NotinUse$==&quot;true&quot;">
        <unset token="NotinUse"></unset>
      </condition>
      <condition>
        <set token="NotinUse">true</set>
      </condition>
    </drilldown>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

rjthibod
Champion

You need to slightly adjust your syntax. I would suggest renaming the token to be slightly more logical, like the following.

 <drilldown>
   <condition match="'InUse' != &quot;true&quot;'>
     <set token="InUse">true</set>
   </condition>
   <condition match="'InUse' == &quot;true&quot;'>
     <unset token="InUse"/>
   </condition>
 </drilldown>

...
<panel depends="$InUse$">
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

    Thursday, June 25, 2026  |  11AM PDT / 2PM EDT  Duration: 1 Hour (Includes live Q&A) Register to ...

Analytics Workspace deprecation

As of Splunk Cloud Platform 10.4.2604 and Splunk Enterprise 10.4, Analytics Workspace is now deprecated. ...

Splunk Developer Day Recap: Building, Publishing, and Growing on the Splunk Platform

Splunk Developer Day brought the Splunk developer community together for a practical look at what it means to ...