Dashboards & Visualizations

Set/Reset token by a search finishing in Dashboard Studio

simon_b
Path Finder

Is there an option in Dashboard Studio to set/reset a token that was previously set by a "Click Event" to a new value when a specific search in the Dashboard has finished running?

 

Just to clarify:

  • I know that I can access tokens from the search with $search name:result.<field>$ or other tokens like $search name:job.done$.
  • What I would need is to set a token when a search is done 

 

Example:

  1. Token "tok_example" has the default value 0
  2. With the click on a button (click event) in the dashboard the token "tok_example" is set to value 1
  3. This (the value 1 of the token "tok_example") triggers a search in the dashboard to run
  4. After the search is finished, I want to set the token "tok_example" back to it's original value 0 (without any additional interaction by the user with the dashboard)

 

Step 4 is the part I don't know how to do in Dashboard Studio. Is there a solution for that?

Labels (3)
0 Karma

dural_yyz
Builder

Currently the only event is an onClick type trigger as far as I can see in the documentation.

https://docs.splunk.com/Documentation/Splunk/9.3.1/DashStudio/WhatNew

Since it appears what you want to do is trigger a search and then wait you might want to look into the recently added Submit button options which should allow you to trigger a data source research on demand.

0 Karma

simon_b
Path Finder

Thanks @dural_yyz  for the answer. Where can I find the Submit button options you mentioned?

 

I could not find any documentation for that...

0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...