I am trying to use the same drilldown link to toggle the function of setting and unsetting the same token.
Current Code
<drilldown>
<condition>
<set token="arrangements_details">true</set>
</condition>
</drilldown>
The idea - just need correct syntax
<drilldown>
<condition match="$arrangements_details$=null">
<set token="arrangements_details">true</set>
</condition>
<condition match="$arrangements_details$=true">
<unset token="arrangements_details">true</unset>
</condition>
</drilldown>
Any suggestions?
I'm guessing this is about using dependent panels. There are a couple of problems in your match statement
1. Using = null - use isnull()
2. = true must be quoted with "
See this
<dashboard>
<label>Click Toggle</label>
<row>
<panel>
<table>
<search>
<query>
index=_internal earliest=-5s
| stats count by _time
</query>
</search>
<drilldown>
<condition match="isnull($arrangements_details$)">
<set token="arrangements_details">true</set>
</condition>
<condition match="$arrangements_details$="true"">
<unset token="arrangements_details">true</unset>
</condition>
</drilldown>
</table>
</panel>
<panel depends="$arrangements_details$">
<table>
<title>arrangements_details=$arrangements_details$</title>
<search>
<query>
| makeresults
| eval Drilldown="Clicked"
| table Drilldown
</query>
</search>
</table>
</panel>
</row>
</dashboard>Hope this helps
I'm guessing this is about using dependent panels. There are a couple of problems in your match statement
1. Using = null - use isnull()
2. = true must be quoted with "
See this
<dashboard>
<label>Click Toggle</label>
<row>
<panel>
<table>
<search>
<query>
index=_internal earliest=-5s
| stats count by _time
</query>
</search>
<drilldown>
<condition match="isnull($arrangements_details$)">
<set token="arrangements_details">true</set>
</condition>
<condition match="$arrangements_details$="true"">
<unset token="arrangements_details">true</unset>
</condition>
</drilldown>
</table>
</panel>
<panel depends="$arrangements_details$">
<table>
<title>arrangements_details=$arrangements_details$</title>
<search>
<query>
| makeresults
| eval Drilldown="Clicked"
| table Drilldown
</query>
</search>
</table>
</panel>
</row>
</dashboard>Hope this helps
That worked perfectly, thank you!!!