Im running splunk 9.0.5 (with no option to go to 9.1 right away), and I'm trying to do something I've done 1000 times in simple xml.
The screenshot below describes it perfectly.
I want to take the number in one panel, and multiply it by the number in a seond panel, and I want the answer to be in a third panel. I can only appear to set drilldown tokens, but I just want to <set token="THISTOKEN">$result.THISFIELD$</set> and another <set token="THATTOKEN">$result.THATFIELD$</set>
so that I can
...
| eval RESULT=$THISTOKEN$*$THATTOKEN$
I would greatly appreciate anyone who can point me in the right direction to do this in studio.... I feel like I've time warped to Splunk 5.x here...