Dashboards & Visualizations

How do I unset a token if a click value is has the same value?

andrewtrobec
Builder

Hello All,
I have a pie chart divided into slices. When I click a slice it sets a token tok_slice_value with click.value which causes some other fun stuff to happen on the dashboard. If I click on another slice then the token gets updated with that new click.value. What I would like to do is unset the token if the token value is the same as the new click.value. I think I've got it, but I just cannot get the right syntax. Here's what I have:

<drilldown>
   <condition match="&quot;$tok_slice_value$&quot; == &quot;$click.value$&quot;">
      <unset token="tok_slice_value"></unset>
   </condition>
   <condition>
      <set token="tok_slice_value">$click.value$</set>
   </condition>
</drilldown>

Doesn't work unfortunately and I've tried a number of different options to no avail. Can someone please help me?

Thanks!

Andrew

0 Karma
1 Solution

renjith_nair
SplunkTrust
SplunkTrust

@andrewtrobec ,

Try

<condition match="$tok_value$ == 'click.value'">
Happy Splunking!

View solution in original post

renjith_nair
SplunkTrust
SplunkTrust

@andrewtrobec ,

Try

<condition match="$tok_value$ == 'click.value'">
Happy Splunking!

andrewtrobec
Builder

@renjith.nair It works! So I should use '' instead of $$ for the click value. Thanks!

0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...