Hi Everyone.
I have a small dashboard whos purpose is rather simple: input information, when the submit button is clicked, the info will be appended to a lookup.
But first, I want to simply display what the user inputs onto a table. However, the submit button is not working. Here is the dashboard code:
<form version="1.1" theme="dark">
<label>Anonomized Dash Name</label>
<description>Anonomized Description.</description>
<fieldset submitButton="true" autoRun="false">
<input type="text" token="username_token" searchWhenChanged="false">
<label>Username</label>
</input>
<input type="text" token="email_token" searchWhenChanged="false">
<label>Email</label>
</input>
<input type="text" token="phone_number_token" searchWhenChanged="false">
<label>Phone Number</label>
</input>
<input type="text" token="intel_date_token" searchWhenChanged="false">
<label>Intel Date</label>
</input>
<input type="text" token="ip_address_token" searchWhenChanged="false">
<label>IP Address</label>
</input>
<input type="text" token="EE_number_token" searchWhenChanged="false">
<label>EE_number</label>
</input>
<input type="text" token="mailiing_address_token" searchWhenChanged="false">
<label>Mailing Address</label>
</input>
<input type="text" token="ticket_number" searchWhenChanged="false">
<label>Ticket Number</label>
</input>
<input type="text" token="intel_type_token" searchWhenChanged="false">
<label>Intel Type</label>
<default>ATO</default>
</input>
<input type="text" token="comments_token" searchWhenChanged="false">
<label>Comments</label>
</input>
</fieldset>
<row>
<panel>
<table>
<title>Results</title>
<search>
<query>| makeresults
| eval username = "$username_token$"
| eval callback_num = "$phone_number_token$"
| eval email = "$email_token$"
| eval intel_date = "$intel_date_token$"
| eval src_ip = "$ip_address_token$"
| eval "mailing address" = "$mailing_address_token$"
| eval EE_number = "$EE_number_token$"
| eval ph_num = "$phone_number_token$"
| eval "Ticket Number" = "$ticket_number_token$"
| eval Comments = "$comments_token$"
| table username email EE_number callback_num ph_num intel_date src_ip "mailing address" "Ticket Number" Comments</query>
<earliest>-24h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
</form>
Yoiu don't appear to have set the
xsoar_ticket_number_token
I renamed all my variables to anonymize the data. Thanks for catching the one I forgot!