Dashboards & Visualizations

Create a token from every field in a search

mew1033
Explorer

I have a search that I'm using to generate tokens on a dashboard. It only has 1 row, so I'm using `$result.<field>$`. There are a large number of fields, and I want all of them to be tokens. Is there a way I can do that? Maybe with the dashboard eval thing? Using foreach perhaps?

 

Thanks

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Technically speaking, you already have a token for every field - $result.<field>$.

What problem are you trying to solve with so many tokens?

---
If this reply helps you, Karma would be appreciated.
0 Karma

mew1033
Explorer

But wouldn't I have to enclose panels and such that need to use the $result.<field>$ syntax inside of the <search> tags? Can you do that?

 

I'm basically making a dashboard with a whole bunch of these:

mew1033_0-1638306489815.png

I'm injecting the numbers below the percentage via the tokens.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

In that case, you will have to assign each $result.<field>$ you wish to use later to a different token.  There's no shortcut for that, AFAIK.

---
If this reply helps you, Karma would be appreciated.
0 Karma

mew1033
Explorer

Ah, I was afraid of that. Oh well, thought I'd ask.

Thanks for the quick answers!

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...