Dashboards & Visualizations

Possible Reason Why Refresh Dashboard By Token Not Working?

vtsguerrero
Contributor

Hey there, I have this dashboard which is made of a report, and it has two filters using there "WHERE" == clause and token...
For both inputs, the token changes status, but the dashboard itself is not refreshing after the filter...
Does anyone know a possible reason why this might be happening?
Thanks a lot!

0 Karma

jeffland
SplunkTrust
SplunkTrust

Only inline searches will react to changes of your token, reports do not. Have your dashboard use an inline search instead of a report and it should work just fine.

Also make sure to enable "Search on change" on the input that creates your token.

vtsguerrero
Contributor

Acctually, I've already been doing the search this way. The problem is still happening, and it's the first time I've seen this happen. The search only works at the moment when I add the panel, right after it, when I refresh the page, it suddenly stops working, altough nothing was changed since it last worked. It's like if the token's value wasn't passed through to the search, but for panel title, which use the token, it's possible to see that they change...

0 Karma

jeffland
SplunkTrust
SplunkTrust

What way have been doing the searches? As an inline search? Then I'd like to see the XML of the search and the input. And are you using any Javascript in your dashboard?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...