Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- How to have search results filtered by checkbox (t...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have a token:
[x] Show NACK
When enabled (checked) i want to show entries that have State=NACK
When disabled i want to show entries that have State!=NACK
How can i do it?
Thanks in advance!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@cocomaster since your check box input has only one value you can use the <change> event handler for the checkbox. Based on the details provided check out the following run anywhere example which sets tokShowHideNACK token on checkbox change event handler which can be used in your actual search to filter results as per your need.
<form>
<label>Check Box Change Event</label>
<fieldset submitButton="false"></fieldset>
<row>
<panel>
<input type="checkbox" token="tokChkBoxNACK" searchWhenChanged="true">
<label></label>
<choice value="show">Show NACK</choice>
<change>
<condition label="Show NACK">
<set token="tokShowHideNACK">State=NACK</set>
</condition>
<condition>
<set token="tokShowHideNACK">State!=NACK</set>
</condition>
</change>
</input>
<html>
<div>
tokShowHideNACK: $tokShowHideNACK$
</div>
</html>
</panel>
</row>
</form>
Please try out and confirm!
| makeresults | eval message= "Happy Splunking!!!"
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@cocomaster since your check box input has only one value you can use the <change> event handler for the checkbox. Based on the details provided check out the following run anywhere example which sets tokShowHideNACK token on checkbox change event handler which can be used in your actual search to filter results as per your need.
<form>
<label>Check Box Change Event</label>
<fieldset submitButton="false"></fieldset>
<row>
<panel>
<input type="checkbox" token="tokChkBoxNACK" searchWhenChanged="true">
<label></label>
<choice value="show">Show NACK</choice>
<change>
<condition label="Show NACK">
<set token="tokShowHideNACK">State=NACK</set>
</condition>
<condition>
<set token="tokShowHideNACK">State!=NACK</set>
</condition>
</change>
</input>
<html>
<div>
tokShowHideNACK: $tokShowHideNACK$
</div>
</html>
</panel>
</row>
</form>
Please try out and confirm!
| makeresults | eval message= "Happy Splunking!!!"
Dashboards: Hiding charts while search is being executed and other uses for tokens
Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...
Brains, Bytes, and Boston: Learn from the Best at .conf25
