Dashboards & Visualizations

How to unset token if I choose other values from dropdown

spisiakmi
Contributor

Hi,

I have dropdown, where are 30 values. This count can be dynamically changed depends on the search. I want to show some panels, rows, objects in the dashboard ony by choosing 1 value from the dropdown. Otherwise I want to hide these objects. I can do it. I know, if I write hard in xml set and unset condition for all of the values from the dropdown. But, ist there any possibility to do it dynamicaly? E.G. with some OTHERWISE condition for unset the token?
I also tried this method. Everytime at change in the dropdown, unset at first the token.

      <change>
         <condition>
          <unset token="show_token"></unset>
        </condition>
       <condition label="show">
          <set token="show_token">true</set>
        </condition>
      </change>

but it didn't work. By default should be the token show_token set to true. Can you help me, please?

1 Solution

vnravikumar
Champion

Hi

Check this

<form>
  <label>dropdown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="number">
      <label>field1</label>
      <default>3</default>
      <fieldForLabel>count</fieldForLabel>
      <fieldForValue>count</fieldForValue>
      <search>
        <query>| makeresults count=10 | streamstats count</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <change>
        <condition match="'value'==&quot;3&quot;">
          <set token="show">true</set>
        </condition>
        <condition>
          <unset token="show"></unset>
        </condition>
      </change>
    </input>
  </fieldset>
  <row depends="$show$">
    <panel>
      <table>
        <search>
          <query>index="_internal" |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

View solution in original post

vnravikumar
Champion

Hi

Check this

<form>
  <label>dropdown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="number">
      <label>field1</label>
      <default>3</default>
      <fieldForLabel>count</fieldForLabel>
      <fieldForValue>count</fieldForValue>
      <search>
        <query>| makeresults count=10 | streamstats count</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <change>
        <condition match="'value'==&quot;3&quot;">
          <set token="show">true</set>
        </condition>
        <condition>
          <unset token="show"></unset>
        </condition>
      </change>
    </input>
  </fieldset>
  <row depends="$show$">
    <panel>
      <table>
        <search>
          <query>index="_internal" |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

spisiakmi
Contributor

Hi vnravikumar,

unbelievable. Really many thanks for such perfect solution. And it is so simple.

0 Karma

vnravikumar
Champion

Welcome 🙂

0 Karma

vnravikumar
Champion

Can you explain your requirement with example?

0 Karma

spisiakmi
Contributor

Hi vnravikumar,

this is the set of all values of the dropdown:
1;2;3;4;5;6;7;8;9;10.
The default value of the dropdown ist 3.
Many objects of the dashboard should be visible, if the value 3 has been choosen. Otherwise should be hidden.
So if I choose 1OR 2 OR 4 OR 5 OR 6 OR 7 OR 8 OR 9 OR 10 from the dropdown, the objects should be invisible.

0 Karma
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...