Dashboards & Visualizations

Set/Reset token by a search finishing in Dashboard Studio

simon_b
Path Finder

Is there an option in Dashboard Studio to set/reset a token that was previously set by a "Click Event" to a new value when a specific search in the Dashboard has finished running?

 

Just to clarify:

  • I know that I can access tokens from the search with $search name:result.<field>$ or other tokens like $search name:job.done$.
  • What I would need is to set a token when a search is done 

 

Example:

  1. Token "tok_example" has the default value 0
  2. With the click on a button (click event) in the dashboard the token "tok_example" is set to value 1
  3. This (the value 1 of the token "tok_example") triggers a search in the dashboard to run
  4. After the search is finished, I want to set the token "tok_example" back to it's original value 0 (without any additional interaction by the user with the dashboard)

 

Step 4 is the part I don't know how to do in Dashboard Studio. Is there a solution for that?

Labels (3)
0 Karma

dural_yyz
Motivator

Currently the only event is an onClick type trigger as far as I can see in the documentation.

https://docs.splunk.com/Documentation/Splunk/9.3.1/DashStudio/WhatNew

Since it appears what you want to do is trigger a search and then wait you might want to look into the recently added Submit button options which should allow you to trigger a data source research on demand.

0 Karma

simon_b
Path Finder

Thanks @dural_yyz  for the answer. Where can I find the Submit button options you mentioned?

 

I could not find any documentation for that...

0 Karma
Get Updates on the Splunk Community!

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...

New Splunk Innovations Enhance Performance and Accelerate Troubleshooting

Splunk is excited to announce new releases that empower ITOps and engineering teams to stay ahead in ever ...