Dashboards & Visualizations

Set multiple tokens on a single Table view

siddhartha_dada
New Member

Hello

I am trying to see how we can set two tokens on a table below. What ever I try, only seem to be able to get one value at a time. Is it possible to allow users to click on two values in a table and once they click on Submit, pass those tokens over for downstream searches?

Group1
A
B
C
D

Setting the drilldown as

   <drilldown>
          <set token="GAP1">$click.value$</set>
          <set token="GAP2">$click.value1$</set>
   </drilldown>

Want to write the HTML as

 Your Picks: $click.value$, $click.value1$ -- Tried this and it always should a single value in both. 
0 Karma

DavidHourani
Super Champion

Make sure you're leveraging the tokens you created 🙂

You defined GAP1 and GAP2 so use them in your HTML. So is should be like this :

  Your Picks: $GAP1$, $GAP2$ 
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@siddhartha.dadana

You have to use GAP1 and GAP2 in HTML panel.

See below example.

<dashboard>
<row>
    <panel>
      <title>Sample Table</title>
      <table>
        <title>A</title>
        <search>
          <query>| makeresults count=10| eval number=1 | accum number</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="count">10</option>
        <option name="drilldown">cell</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <set token="GAP1">$click.value$</set>
          <set token="GAP2">$click.value2$</set>
        </drilldown>
      </table>
    </panel>
    <panel>
      <title>HTML Panel</title>
      <html>
        click_value : $GAP1$ <br/>
        click_value2 : $GAP2$
      </html>
    </panel>
  </row>
</dashboard>
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...