You can encode both values in the
value by setting the values to something like this
index=xxx sourcetype=yyy and then use the combined KVP in your search like this:
<query>$MyDualKVP$ | stats count by host</query>
So do you really need 2 tokens?
@sravankaripe... You need to add more details. What is the input that you are using what are the values(fields) that you need to pass? Also what is the search/search results?
You should be able to code inputs change event to pass on the values you need.
Input type is Dropdown.
this dropdown should have two tokens.
1st token will go to first panel (say index= abc sourcetype=abc:abc $token1$)
2nd token will goes to second panel in the same dashboard.(say index=xyz sourcetype=xyz:xyz $token2$)
As a workaround you could create a base search within the dashboard that generates the second token utilising the first token from the input, that way you would have both tokens available within the XML, however as above more details would be needed to give a full answer (Type of input, desired outcome, etc..) Would you be able to post a example of the dashboard/reports/XML?
You can put your values for
origToken between a separator string such as
index=abc sourcetype=abc::index=xyz sourcetype=xyz) and then use XML like this:
<selection> <eval token="derivedToken1">replace($origToken$, ".*::", "")</eval> <eval token="derivedToken2">replace($origToken$, "::.*", "")</eval> </selection>