Dashboards & Visualizations

Setting Tokens from Single Value Panel Results to manipulate another single panel (Why is this still so hard in studio?)

mjones414
Contributor

Im running splunk 9.0.5 (with no option to go to 9.1 right away), and I'm trying to do something I've done 1000 times in simple xml.
The screenshot below describes it perfectly.

I want to take the number in one panel, and multiply it by the number in a seond panel, and I want the answer to be in a third panel.  I can only appear to set drilldown tokens, but I just want to <set token="THISTOKEN">$result.THISFIELD$</set> and another <set token="THATTOKEN">$result.THATFIELD$</set>

so that I can
...
| eval RESULT=$THISTOKEN$*$THATTOKEN$

mjones414_0-1692652104673.png

I would greatly appreciate anyone who can point me in the right direction to do this in studio....  I feel like I've time warped to Splunk 5.x here...

Labels (2)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...