Dashboards & Visualizations

Is there a way that we can set a search result to a token in js ?

Jhanzkie
Path Finder

Hello , sorry for this another noob question.

Is there a way that we can set a search result to a token in js ?

For example: 
<row>
<panel depends="$panel_show$">
<single>
<search>
<query>|makeresults|eval result=1016</query>
<done>
<set token="mytoken">$result.result$</set>
</done>
</search>
<option name="rangeColors">["0x006d9c","0xf8be34","0xf1813f","0xdc4e41"]</option>
<option name="rangeValues">[100,200,300]</option>
<option name="underLabel">cool number</option>
<option name="useColors">1</option>
</single>
</panel>
</row>

"<done>
<set token="mytoken">$result.result$</set>
</done>"

is there a way to transfer this to js ? 

thank you



Labels (2)
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Jhanzkie 

You can try this.

 

<dashboard script="a.js">
  <label>Set Token Example</label>
  <row>
    <panel>
      <single>
        <search id="singleViewSearch">
          <query>|makeresults|eval result=1016</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        $mytoken$
      </html>
    </panel>
  </row>
</dashboard>

 

 

a.js

 

require([
    'jquery',
    'splunkjs/mvc',
    'splunkjs/mvc/simplexml/ready!'
], function($, mvc) {
    var singleViewSearch = mvc.Components.getInstance("singleViewSearch"); 
    var defaultTokenModel = mvc.Components.get('default');
    var submittedTokenModel = mvc.Components.get("submitted");
    console.log(singleViewSearch)
    singleViewSearch.on("search:done", function() {

        var myResults = singleViewSearch.data("results"); // get the data from that search
        console.log("Search done", myResults)
        myResults.on("data", function() {
            resultArray = myResults.data().rows;
            console.log(resultArray, resultArray[0][1])
            defaultTokenModel.set("mytoken", resultArray[0][1]);
            submittedTokenModel.set(defaultTokenModel.toJSON());
        })
    })
});

 

 

Just try and change it as per your requirement.

Thanks

KV

 

View solution in original post

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Jhanzkie 

You can try this.

 

<dashboard script="a.js">
  <label>Set Token Example</label>
  <row>
    <panel>
      <single>
        <search id="singleViewSearch">
          <query>|makeresults|eval result=1016</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        $mytoken$
      </html>
    </panel>
  </row>
</dashboard>

 

 

a.js

 

require([
    'jquery',
    'splunkjs/mvc',
    'splunkjs/mvc/simplexml/ready!'
], function($, mvc) {
    var singleViewSearch = mvc.Components.getInstance("singleViewSearch"); 
    var defaultTokenModel = mvc.Components.get('default');
    var submittedTokenModel = mvc.Components.get("submitted");
    console.log(singleViewSearch)
    singleViewSearch.on("search:done", function() {

        var myResults = singleViewSearch.data("results"); // get the data from that search
        console.log("Search done", myResults)
        myResults.on("data", function() {
            resultArray = myResults.data().rows;
            console.log(resultArray, resultArray[0][1])
            defaultTokenModel.set("mytoken", resultArray[0][1]);
            submittedTokenModel.set(defaultTokenModel.toJSON());
        })
    })
});

 

 

Just try and change it as per your requirement.

Thanks

KV

 

Jhanzkie
Path Finder

Thanks it worked 🙂

Tags (1)
0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...