Dashboards & Visualizations

How to eval a token in the Init part of dashboard based on another token

santosh_sshanbh
Path Finder

I have 2 custom apps as App_A and App_B. I want to hide a panel based on the current app. For that I have used $env:app$ token. 

Now I want to eval a new token in the Init part of the dashboard which will compare the $env:app$ with App_A or App_B and then generate the value for new token.

I tried various options like case, if but no success. Can any one help me in this scenario?

 

 

Labels (3)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

I don't think tokens are available at the init phase, so you can do it using a search and a done clause

  <search>
    <query>
      |makeresults
      | eval app="$env:app$"
    </query>
    <done>
      <eval token="app_a">if($result.app$="app_a","App_A",null())</eval>
      <eval token="app_b">if($result.app$="app_b","App_B",null())</eval>
    </done>
  </search>

with the depends="$app_a/b$" in the appropriate panel definition

Hope this helps

View solution in original post

Tags (1)

bowesmana
SplunkTrust
SplunkTrust

I don't think tokens are available at the init phase, so you can do it using a search and a done clause

  <search>
    <query>
      |makeresults
      | eval app="$env:app$"
    </query>
    <done>
      <eval token="app_a">if($result.app$="app_a","App_A",null())</eval>
      <eval token="app_b">if($result.app$="app_b","App_B",null())</eval>
    </done>
  </search>

with the depends="$app_a/b$" in the appropriate panel definition

Hope this helps

Tags (1)

santosh_sshanbh
Path Finder

Thanks for the help. Your solution worked successfully and I also got to know that tokens are not available in Init part of dashboard.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...