Prepopulate the Splunk Dashboard text input field with the values from event?

[bhuvanabala]

Hi Team,

I have a field called errorid in my log, where errorid=x1234 and i have a solution field and its value is a link. On linking the link the user is navigated to Splunk dashboard. The dashboard contains a input text box

Please let me know how to prepopulate errorid text box with the value(x1234) from the event?

Please help us

[tiagofbmm]

Hey

You can use JS to pass tokens (form ones) specified in one dashboard to another one, like this:

function clickhandler(e,split_token) {
svc_drilldown = "/app/ESI/service_explorer"+"?&form.time.earliest="+earliest+"&form.time.latest="+latest+"&form.serviceName="+e.name2+"&form.host="+'\"'+"*"+'\"'+"&form.cluster="+cluster;
window.open(svc_drilldown);
}

[tiagofbmm]

Please let me know if the answer was useful for you. If it was, accept it and upvote. If not, give us more input so we can help you with that