Dear experts,
I wan't to set a token in xml which is not displayed on table .
My requirement :
my_search | .... | eval key = "12345$" | table index , source
But i want to set a token in dashboard.xml as
<set token="Key1">$row.key$</set>
Is there any way ??
Regards,
Nagee.
You can do this using the <fields>
XML element. There is an example below. Notice that we have key
in the list of fields we table, but leave it out in the <fields>
element.
<panel>
<title>Hide key field, but allow drilldown</title>
<table>
<search>
<query>my_search | ... | eval key = "12345$" | table index , source, key</query>
</search>
<option name="drilldown">row</option>
<drilldown>
<condition field="*">
<set token="Key1">$row.key$</set>
</condition>
</drilldown>
<fields>index, source</fields>
</table>
</panel>
You can do this using the <fields>
XML element. There is an example below. Notice that we have key
in the list of fields we table, but leave it out in the <fields>
element.
<panel>
<title>Hide key field, but allow drilldown</title>
<table>
<search>
<query>my_search | ... | eval key = "12345$" | table index , source, key</query>
</search>
<option name="drilldown">row</option>
<drilldown>
<condition field="*">
<set token="Key1">$row.key$</set>
</condition>
</drilldown>
<fields>index, source</fields>
</table>
</panel>
Thanks bruceclarke , it works fine, It was really appreciated.
Regards,
Nagee