Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: How to have search results filtered by checkbo...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have a token:
[x] Show NACK
When enabled (checked) i want to show entries that have State=NACK
When disabled i want to show entries that have State!=NACK
How can i do it?
Thanks in advance!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@cocomaster since your check box input has only one value you can use the <change> event handler for the checkbox. Based on the details provided check out the following run anywhere example which sets tokShowHideNACK token on checkbox change event handler which can be used in your actual search to filter results as per your need.
<form>
<label>Check Box Change Event</label>
<fieldset submitButton="false"></fieldset>
<row>
<panel>
<input type="checkbox" token="tokChkBoxNACK" searchWhenChanged="true">
<label></label>
<choice value="show">Show NACK</choice>
<change>
<condition label="Show NACK">
<set token="tokShowHideNACK">State=NACK</set>
</condition>
<condition>
<set token="tokShowHideNACK">State!=NACK</set>
</condition>
</change>
</input>
<html>
<div>
tokShowHideNACK: $tokShowHideNACK$
</div>
</html>
</panel>
</row>
</form>
Please try out and confirm!
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@cocomaster since your check box input has only one value you can use the <change> event handler for the checkbox. Based on the details provided check out the following run anywhere example which sets tokShowHideNACK token on checkbox change event handler which can be used in your actual search to filter results as per your need.
<form>
<label>Check Box Change Event</label>
<fieldset submitButton="false"></fieldset>
<row>
<panel>
<input type="checkbox" token="tokChkBoxNACK" searchWhenChanged="true">
<label></label>
<choice value="show">Show NACK</choice>
<change>
<condition label="Show NACK">
<set token="tokShowHideNACK">State=NACK</set>
</condition>
<condition>
<set token="tokShowHideNACK">State!=NACK</set>
</condition>
</change>
</input>
<html>
<div>
tokShowHideNACK: $tokShowHideNACK$
</div>
</html>
</panel>
</row>
</form>
Please try out and confirm!
| makeresults | eval message= "Happy Splunking!!!"
Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA
.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...
A Season of Skills: New Splunk Courses to Light Up Your Learning Journey
