Is it possible to store field names or values from one panel as a dashboard token to be used in other panels within the same dashboard?

[landen99]

Is it possible to store the field names or values from one dashboard panel as a dashboard token to be used in other panels within the same dashboard?

[edrivera3]

Have you found a way to do this?

[the_wolverine · Accepted solution]

You can use PostProcess to do this:
http://answers.splunk.com/answers/170633/how-do-i-use-one-search-to-populate-a-bunch-of-pan.html

[somesoni2]

You can utilize Splunk's In-page drilldown method to set fields from one panel visualization as token which can be used in all other panels once set (generally to be set on click events.)

See dashboard example app and see example In-page drilldown

[landen99]

That method requires user interaction. I prefer a solution which automatically sends the field value to a dashboard token for use in other panels so that users have fewer options to manage on the dashboard.

[landen99]

A simple example might be:

| addinfo | fields + info_sid

then in another panel of the same dashboard:

| loadjob $info_sid$

[tom_frotscher]

Can you provide some more informations?

For example it is possible to click on one value in a table and then this value is used in an other panel. You can achieve this with set. Here is some doku with an example:

http://docs.splunk.com/Documentation/Splunk/6.1.4/Viz/PanelreferenceforSimplifiedXML#set