Dashboards & Visualizations

Setting Tokens from Single Value Panel Results to manipulate another single panel (Why is this still so hard in studio?)

mjones414
Contributor

Im running splunk 9.0.5 (with no option to go to 9.1 right away), and I'm trying to do something I've done 1000 times in simple xml.
The screenshot below describes it perfectly.

I want to take the number in one panel, and multiply it by the number in a seond panel, and I want the answer to be in a third panel.  I can only appear to set drilldown tokens, but I just want to <set token="THISTOKEN">$result.THISFIELD$</set> and another <set token="THATTOKEN">$result.THATFIELD$</set>

so that I can
...
| eval RESULT=$THISTOKEN$*$THATTOKEN$

mjones414_0-1692652104673.png

I would greatly appreciate anyone who can point me in the right direction to do this in studio....  I feel like I've time warped to Splunk 5.x here...

Labels (2)
Tags (2)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...