Dashboards & Visualizations

How to reference token namespaces in SimpleXML?

rjthibod
Champion

I recently saw a reference in slides from .conf 2016 (https://conf.splunk.com/files/2016/slides/dashboard-wizardry.pdf, slide 16) that suggests one can reference a specific token namespace in SimpleXML, e.g., $submitted:mytoken$ or $default:mytoken$.

Initial searches for documentation came up empty, and simple tests in 6.4 seem to fail.

Can anyone clarify if this is supported, what versions support it, and if there is some documentation?

1 Solution

rjthibod
Champion

My own testing has determined the following:

  1. There currently is no documentation on the Splunk site and the Splunk Docs team has my feedback.
  2. This is only in Splunk 6.5 and newer
  3. You can reference the namespaces, $default:...$ and $submitted:..., to get token values.
  4. You cannot reference the namespace when setting a token.

View solution in original post

rjthibod
Champion

My own testing has determined the following:

  1. There currently is no documentation on the Splunk site and the Splunk Docs team has my feedback.
  2. This is only in Splunk 6.5 and newer
  3. You can reference the namespaces, $default:...$ and $submitted:..., to get token values.
  4. You cannot reference the namespace when setting a token.

DalJeanis
Legend

Note sure where in the other docs it might be, but here's a couple of references...

Walkthrough of the autogenerated HTML dashboard code:

http://dev.splunk.com/view/SP-CAAAETK#section4

Thread with a couple of good references...

https://answers.splunk.com/answers/143244/how-token-namespaces-and-initialize-tokens-help-with-execu...

0 Karma

rjthibod
Champion

Thank you for digging, but these are not applicable. I am very comfortable with token namepscaes in JS and HTML and their general underpinnings. The question is specifically about referencing tokens by their namespace in SimpleXML, which seems to be a feature with no documentation or clarification in terms of where it can be used.

0 Karma

pradeepkumarg
Influencer

I highly recommend installing Splunk 6.x Dashboard Examples app which has many good examples with sample codes.

https://splunkbase.splunk.com/app/1603/

0 Karma

rjthibod
Champion

I do not see anything in that app or in the documentation that addresses my original question. If you can, please be more specific in regards to what I am missing that addresses my specific question about referencing the token namespaces directly in the SimpleXML token values, e.g., $submittied:mytoken$. Please point it out if I am missing something.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...