Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: How do I do addition in a Splunk HTML form?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't think you can directly do calculation in HTML, for your requirement can't you do calculation in splunk query and use the result token in html?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can do that in SimpleXML using . Where to place the depends on where your tokens come from. In case they come from an input:
<form>
<label>Dashboard</label>
<fieldset submitButton="false">
<input type="text" token="tok_mem">
<label>Memory</label>
<change>
<eval token="tok_sum">$tok_mem$ + $tok_swap$</eval>
</change>
</input>
<input type="text" token="tok_swap">
<label>Swap</label>
<change>
<eval token="tok_sum">$tok_mem$ + $tok_swap$</eval>
</change>
</input>
</fieldset>
<row>
<panel>
<html>
<ul>
<li>
<p>Ram Per Server: $tok_sum$</p>
</li>
</ul>
</html>
</panel>
</row>
</form>
You could do that on Search as well, ... see Splunk>docs on token usage
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't think you can directly do calculation in HTML, for your requirement can't you do calculation in splunk query and use the result token in html?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes! Thanks. I'm not sure if it's the best way or not, and am definitely open to hearing other answers/modifications. This is what I did:
<panel>
<search>
<query>
| makeresults | eval baz=$a$+$b$| table baz
</query>
<preview>
<set token="baz">$result.baz$</set>
</preview>
</search>
<html>
<p><b>section title</b></p>
<ul>
<li>
<p>field: <a>$baz$</a></p>
</li>
</ul>
</html>
</panel>
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can always hide any panel or table by using depends="$hidden$", for eg:-
<table depends="$hidden$">
will hide the table from displaying.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks once more. For anyone else looking for the answer on this page, @vijeta's comment above references my code before I edited it, where previously I had the query run in a table and was looking for a way to hide it.
Thus, there are two ways of accomplishing the answer to this question: run the query in a table and hide it, or just put your query in the same panel as the html form like I did in my edited comment.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Persistent Queue at TcpOut — One of Splunk's Most Practical Features
Skip the Awkward Silence: Have a .conf-ersation at .conf26
Rethinking Zero Trust: From Product Purchases to Logical Control Evidence
