Dashboards & Visualizations

How could I check multiple condition(state) at <input> token?

Questioner
Path Finder

I want to combine these two <condition> into one.

<input>
.....
<change>
<condition value = "BT">
<unset token="show_wifi_connect_type"></unset>
</condition>
<condition value="UART">
<unset token="show_wifi_connect_type"></unset>
</condition>
</change>
...
</input>

I tried combine these two status using "match", but it doesn't work.
How could I solve this problem?

Labels (1)
Tags (2)
0 Karma
1 Solution

dtburrows3
Builder

I believe this should do it.

<input>
.....
  <change>
    <condition match="'value'==&quot;BT&quot; OR 'value'==&quot;UART&quot;">
        <unset token="show_wifi_connect_type"></unset>
    </condition>
   </change>
...
</input>

 
You can see on the screenshots it worked as expected when testing locally.

dtburrows3_0-1703773137637.png

dtburrows3_1-1703773155945.png

dtburrows3_2-1703773171653.png

 

View solution in original post

Questioner
Path Finder

@dtburrows3  Thank you for your support!

It work!

0 Karma

dtburrows3
Builder

I believe this should do it.

<input>
.....
  <change>
    <condition match="'value'==&quot;BT&quot; OR 'value'==&quot;UART&quot;">
        <unset token="show_wifi_connect_type"></unset>
    </condition>
   </change>
...
</input>

 
You can see on the screenshots it worked as expected when testing locally.

dtburrows3_0-1703773137637.png

dtburrows3_1-1703773155945.png

dtburrows3_2-1703773171653.png

 

Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...