Dashboards & Visualizations

How to unset token if I choose other values from dropdown

spisiakmi
Contributor

Hi,

I have dropdown, where are 30 values. This count can be dynamically changed depends on the search. I want to show some panels, rows, objects in the dashboard ony by choosing 1 value from the dropdown. Otherwise I want to hide these objects. I can do it. I know, if I write hard in xml set and unset condition for all of the values from the dropdown. But, ist there any possibility to do it dynamicaly? E.G. with some OTHERWISE condition for unset the token?
I also tried this method. Everytime at change in the dropdown, unset at first the token.

      <change>
         <condition>
          <unset token="show_token"></unset>
        </condition>
       <condition label="show">
          <set token="show_token">true</set>
        </condition>
      </change>

but it didn't work. By default should be the token show_token set to true. Can you help me, please?

1 Solution

vnravikumar
Champion

Hi

Check this

<form>
  <label>dropdown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="number">
      <label>field1</label>
      <default>3</default>
      <fieldForLabel>count</fieldForLabel>
      <fieldForValue>count</fieldForValue>
      <search>
        <query>| makeresults count=10 | streamstats count</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <change>
        <condition match="'value'==&quot;3&quot;">
          <set token="show">true</set>
        </condition>
        <condition>
          <unset token="show"></unset>
        </condition>
      </change>
    </input>
  </fieldset>
  <row depends="$show$">
    <panel>
      <table>
        <search>
          <query>index="_internal" |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

View solution in original post

vnravikumar
Champion

Hi

Check this

<form>
  <label>dropdown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="number">
      <label>field1</label>
      <default>3</default>
      <fieldForLabel>count</fieldForLabel>
      <fieldForValue>count</fieldForValue>
      <search>
        <query>| makeresults count=10 | streamstats count</query>
        <earliest>-24h@h</earliest>
        <latest>now</latest>
      </search>
      <change>
        <condition match="'value'==&quot;3&quot;">
          <set token="show">true</set>
        </condition>
        <condition>
          <unset token="show"></unset>
        </condition>
      </change>
    </input>
  </fieldset>
  <row depends="$show$">
    <panel>
      <table>
        <search>
          <query>index="_internal" |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </table>
    </panel>
  </row>
</form>

spisiakmi
Contributor

Hi vnravikumar,

unbelievable. Really many thanks for such perfect solution. And it is so simple.

0 Karma

vnravikumar
Champion

Welcome 🙂

0 Karma

vnravikumar
Champion

Can you explain your requirement with example?

0 Karma

spisiakmi
Contributor

Hi vnravikumar,

this is the set of all values of the dropdown:
1;2;3;4;5;6;7;8;9;10.
The default value of the dropdown ist 3.
Many objects of the dashboard should be visible, if the value 3 has been choosen. Otherwise should be hidden.
So if I choose 1OR 2 OR 4 OR 5 OR 6 OR 7 OR 8 OR 9 OR 10 from the dropdown, the objects should be invisible.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...