Re: Resetting Dashboard Tokens using XML

amcb90 · ‎06-17-2020

In the past I once knew how to create a single radio button that, when selected, would reset all desired dashboard tokens, by using XML. This button would also reset itself back to being de-selected (not filled). Does anyone know how to do this?

I learned how to do this previously in one Splunk's courses but I am not entirely sure which course it was. (SF 1-3 or Adv. DB Creation)

niketn · ‎06-18-2020

@amcb90 if you do not want to use JS you can also create and anchor html tag which would reload itself in the same browser, hence resetting the form tokens. Try by adding the following html panel in your existing dashboard and test.

    <panel id="panelRefresh">
      <html>
        <div style="float:right">
          <a href="/app/$env:app$/$env:page$" style="display:flex">
            <i class="icon-rotate"/>
            <div style="padding-left:5px;">Reset</div>
          </a>
        </div>
      </html>
    </panel>

If it works you can format the panel content as per your needs and then create a pre built panel as per one of my older answers: https://community.splunk.com/t5/Dashboards-Visualizations/How-to-unset-tokens-for-all-filters-and-se...

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

SR_70 · ‎10-27-2022

Thank you! I was able add reset feature to my dashboard.

gcusello · ‎10-27-2022

Hi @SR_70 ,

good for you, see next time!

Please accept one answer for the other people of Community

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

gcusello · ‎06-17-2020

Hi @amcb90 ,

I took this solution from answers:

  <fieldset submitButton="false" autoRun="false">
    <input type="radio" token="resetTokens" searchWhenChanged="true">
      <label></label>
      <choice value="reset">Reset Inputs</choice>
      <choice value="retain">Retain</choice>
      <default>retain</default>
      <change>
        <condition value="reset">
          <unset token="token1"></unset>
          <unset token="token2"></unset>
          <unset token="form.token1"></unset>
          <unset token="form.token2"></unset>
          <set token="resetTokens">retain</set>
          <set token="form.resetTokens">retain</set>
        </condition>
      </change>
    </input>
  </fieldset>

adding this code to the input section (Fieldset).

Ciao.

Giuseppe

gcusello · ‎06-18-2020

the answer I used is from @niketn:

https://community.splunk.com/t5/Archive/Clear-or-hide-old-drilldown-panel-results-from-new-filter-se...

Ciao.

Giuseppe

How to reset dashboard tokens using XML?

simple XML

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?