Dashboards & Visualizations

Possible Reason Why Refresh Dashboard By Token Not Working?

vtsguerrero
Contributor

Hey there, I have this dashboard which is made of a report, and it has two filters using there "WHERE" == clause and token...
For both inputs, the token changes status, but the dashboard itself is not refreshing after the filter...
Does anyone know a possible reason why this might be happening?
Thanks a lot!

0 Karma

jeffland
SplunkTrust
SplunkTrust

Only inline searches will react to changes of your token, reports do not. Have your dashboard use an inline search instead of a report and it should work just fine.

Also make sure to enable "Search on change" on the input that creates your token.

vtsguerrero
Contributor

Acctually, I've already been doing the search this way. The problem is still happening, and it's the first time I've seen this happen. The search only works at the moment when I add the panel, right after it, when I refresh the page, it suddenly stops working, altough nothing was changed since it last worked. It's like if the token's value wasn't passed through to the search, but for panel title, which use the token, it's possible to see that they change...

0 Karma

jeffland
SplunkTrust
SplunkTrust

What way have been doing the searches? As an inline search? Then I'd like to see the XML of the search and the input. And are you using any Javascript in your dashboard?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...