Is there a simple way to get the current dashboard theme in a token?

[alhoctamis]

Hello!

I am trying to use less static colors as possible in a dashboard so that users could switch between dark and light mode without dashboard looking odd.

It would useful to have current theme in a token so that I could switch static colors based on chosen theme.

Too bad it is not in the env: tokens.

<form theme="light">
  <label>Dashboard</label>
  ...

Any idea?

[alhoctamis · Accepted solution]

It is possible by parsing view data using a background search:

  <search>
    <query>| rest splunk_server="local" /servicesNS/-/-/data/ui/views search="eai:acl.app=<app_name> label=<view_label>"
| rex field="eai:data" "theme\=\"(?&lt;theme&gt;.+?)\""
| stats values(theme) as theme</query>
    <earliest>0</earliest>
    <latest></latest>
    <done>
      <set token="theme_tok">$result.theme$</set>
    </done>
  </search>