Dashboards & Visualizations

Set a token value of a dashboard as the default of a drilldown dashboards dropdown

ValentinM
Engager

I have 2 Dashboards A and B,  They both have Dropdown Inputs for the host field and can be used individually. But Dashboard B is also mainly used as a Detail Drilldown for 1 search of Dashboard A. So what i want is when i click on the Drilldown in Dashboard A is that my Token value for the host field in Dasboard B is set to the token value of host of Dasboard A.



Thanks in advance for any help.

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You can pass token values in the URL for the dashboard being called in the drilldown or another link e.g. html address element

Dashboard token setter

<form>
  <label>Token setter</label>
  <description>Inputs to set multi-select tokens</description>
  <fieldset submitButton="false" autoRun="true">
    <input type="multiselect" token="preselect" searchWhenChanged="true">
      <label>Select</label>
      <choice value="W">w</choice>
      <choice value="X">x</choice>
      <choice value="Y">y</choice>
      <choice value="Z">z</choice>
      <default>X</default>
      <change>
        <eval token="gettoken">"form.preselect=".mvjoin(split(preselect," "),"&amp;form.preselect=")</eval>
      </change>
    </input>
  <html>
    <a target="_blank" href="/app/answers/token_getter?$gettoken|n$">Go to getter</a>
  </html>
  </fieldset>
</form>

Dashboard token getter

<form>
  <label>Token getter</label>
  <description>Multi-select initialised on call</description>
  <fieldset submitButton="false" autoRun="true">
    <input type="multiselect" token="preselect" searchWhenChanged="true">
      <label>Pre-select</label>
      <choice value="W">w</choice>
      <choice value="X">x</choice>
      <choice value="Y">y</choice>
      <choice value="Z">z</choice>
      <default>X</default>
    </input>
  </fieldset>
</form>

Note that the token name used in the url (gettoken) does not have to be the same as the multi-select token in the setting dashboard, but the value of the url argument(s) does need to match the token name in the getting dashboard. This should also use the convention form.token to set the value of the input in the getting dashboard.

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

You can pass token values in the URL for the dashboard being called in the drilldown or another link e.g. html address element

Dashboard token setter

<form>
  <label>Token setter</label>
  <description>Inputs to set multi-select tokens</description>
  <fieldset submitButton="false" autoRun="true">
    <input type="multiselect" token="preselect" searchWhenChanged="true">
      <label>Select</label>
      <choice value="W">w</choice>
      <choice value="X">x</choice>
      <choice value="Y">y</choice>
      <choice value="Z">z</choice>
      <default>X</default>
      <change>
        <eval token="gettoken">"form.preselect=".mvjoin(split(preselect," "),"&amp;form.preselect=")</eval>
      </change>
    </input>
  <html>
    <a target="_blank" href="/app/answers/token_getter?$gettoken|n$">Go to getter</a>
  </html>
  </fieldset>
</form>

Dashboard token getter

<form>
  <label>Token getter</label>
  <description>Multi-select initialised on call</description>
  <fieldset submitButton="false" autoRun="true">
    <input type="multiselect" token="preselect" searchWhenChanged="true">
      <label>Pre-select</label>
      <choice value="W">w</choice>
      <choice value="X">x</choice>
      <choice value="Y">y</choice>
      <choice value="Z">z</choice>
      <default>X</default>
    </input>
  </fieldset>
</form>

Note that the token name used in the url (gettoken) does not have to be the same as the multi-select token in the setting dashboard, but the value of the url argument(s) does need to match the token name in the getting dashboard. This should also use the convention form.token to set the value of the input in the getting dashboard.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...