Dashboards & Visualizations

How could I check multiple condition(state) at <input> token?

Questioner
Path Finder

I want to combine these two <condition> into one.

<input>
.....
<change>
<condition value = "BT">
<unset token="show_wifi_connect_type"></unset>
</condition>
<condition value="UART">
<unset token="show_wifi_connect_type"></unset>
</condition>
</change>
...
</input>

I tried combine these two status using "match", but it doesn't work.
How could I solve this problem?

Labels (1)
Tags (2)
0 Karma
1 Solution

dtburrows3
Builder

I believe this should do it.

<input>
.....
  <change>
    <condition match="'value'==&quot;BT&quot; OR 'value'==&quot;UART&quot;">
        <unset token="show_wifi_connect_type"></unset>
    </condition>
   </change>
...
</input>

 
You can see on the screenshots it worked as expected when testing locally.

dtburrows3_0-1703773137637.png

dtburrows3_1-1703773155945.png

dtburrows3_2-1703773171653.png

 

View solution in original post

Questioner
Path Finder

@dtburrows3  Thank you for your support!

It work!

0 Karma

dtburrows3
Builder

I believe this should do it.

<input>
.....
  <change>
    <condition match="'value'==&quot;BT&quot; OR 'value'==&quot;UART&quot;">
        <unset token="show_wifi_connect_type"></unset>
    </condition>
   </change>
...
</input>

 
You can see on the screenshots it worked as expected when testing locally.

dtburrows3_0-1703773137637.png

dtburrows3_1-1703773155945.png

dtburrows3_2-1703773171653.png

 

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...