Dashboards & Visualizations

Setting Tokens from Single Value Panel Results to manipulate another single panel (Why is this still so hard in studio?)

mjones414
Contributor

Im running splunk 9.0.5 (with no option to go to 9.1 right away), and I'm trying to do something I've done 1000 times in simple xml.
The screenshot below describes it perfectly.

I want to take the number in one panel, and multiply it by the number in a seond panel, and I want the answer to be in a third panel.  I can only appear to set drilldown tokens, but I just want to <set token="THISTOKEN">$result.THISFIELD$</set> and another <set token="THATTOKEN">$result.THATFIELD$</set>

so that I can
...
| eval RESULT=$THISTOKEN$*$THATTOKEN$

mjones414_0-1692652104673.png

I would greatly appreciate anyone who can point me in the right direction to do this in studio....  I feel like I've time warped to Splunk 5.x here...

Labels (2)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...