Dashboards & Visualizations

How to eval a token in the Init part of dashboard based on another token

santosh_sshanbh
Path Finder

I have 2 custom apps as App_A and App_B. I want to hide a panel based on the current app. For that I have used $env:app$ token. 

Now I want to eval a new token in the Init part of the dashboard which will compare the $env:app$ with App_A or App_B and then generate the value for new token.

I tried various options like case, if but no success. Can any one help me in this scenario?

 

 

Labels (3)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

I don't think tokens are available at the init phase, so you can do it using a search and a done clause

  <search>
    <query>
      |makeresults
      | eval app="$env:app$"
    </query>
    <done>
      <eval token="app_a">if($result.app$="app_a","App_A",null())</eval>
      <eval token="app_b">if($result.app$="app_b","App_B",null())</eval>
    </done>
  </search>

with the depends="$app_a/b$" in the appropriate panel definition

Hope this helps

View solution in original post

Tags (1)

bowesmana
SplunkTrust
SplunkTrust

I don't think tokens are available at the init phase, so you can do it using a search and a done clause

  <search>
    <query>
      |makeresults
      | eval app="$env:app$"
    </query>
    <done>
      <eval token="app_a">if($result.app$="app_a","App_A",null())</eval>
      <eval token="app_b">if($result.app$="app_b","App_B",null())</eval>
    </done>
  </search>

with the depends="$app_a/b$" in the appropriate panel definition

Hope this helps

Tags (1)

santosh_sshanbh
Path Finder

Thanks for the help. Your solution worked successfully and I also got to know that tokens are not available in Init part of dashboard.

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...