Dashboards & Visualizations
×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
Solved! Jump to solution

Setting different token value depending on token value

light_of_sirius
Explorer
‎09-11-2020 01:21 AM

Hello,

i am trying to set the color of writing depending on the user input, i.e., he inputs two numbers and if number 1 is larger than number 2 then the writing is green.

This problem is related to my actual problem and supposed to simplify the setting.

Feel free to point out any rudimentary/logical problems in the code, i am new to html/xml and find everything quite confusing and (weirdly?) complicated.

Thank you 🙂

 

 

 

<form>
  <label>condition</label>
  <init>
    <unset token="dif"></unset>
  </init>
  <fieldset submitButton="false">
    <input type="text" token="field1">
      <label>field1</label>
    </input>
    <input type="text" token="field2">
      <label>field2</label>
    </input>
  </fieldset>
  <row>
    <panel>
      <single>
        <search>
          <query>
            index = _internal
            |eval dif = $field1$-$field2$
            |table dif
          </query>
          <done>
            <condition match="$result.dif$>0">
              <set token="color1">"green"</set>
            </condition>
            <condition match="$result.dif$<0">
              <set token="color1">"red"</set>
            </condition>
          </done>
        </search>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <body>
          <div>
            <p color="$color1$">Number 1 is larger than number 2!</p>
          </div>
        </body>
      </html>
    </panel>
  </row>
</form>

 

 

 

 

 

Labels (2)
Labels
0 Karma
Reply
1 Solution
Solved! Jump to solution
Solution

renjith_nair
Legend
‎09-11-2020 03:19 AM

Try

 

<form>
  <label>condition</label>
  <init>
    <unset token="dif"></unset>
  </init>
  <fieldset submitButton="false">
    <input type="text" token="field1">
      <label>field1</label>
    </input>
    <input type="text" token="field2">
      <label>field2</label>
    </input>
  </fieldset>
  <row>
    <panel>
      <single>
        <search>
          <query>
            |makeresults
            |eval dif = $field1$-$field2$
            |table dif
          </query>
          <done>
            <condition match="$result.dif$ &gt; 0">
              <set token="color1">#dc4e41</set>
              <set token="status">greater than</set>
            </condition>
            <condition match="$result.dif$ &lt; 0">
              <set token="color1">#53a051</set>
              <set token="status">lesser than</set>
            </condition>
            <condition>
              <set token="color1">#0877a6</set>
              <set token="status">equal to</set>
            </condition>
          </done>
        </search>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <body>
          <div>
            <p>
              <font color="$color1$">Number $field1$ is $status$ number $field2$ ! </font>
            </p>
          </div>
        </body>
      </html>
    </panel>
  </row>
</form>

 

 

---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

Reply
Solved! Jump to solution

light_of_sirius
Explorer
‎09-11-2020 04:49 AM

Thank you, it works. 

0 Karma
Reply
Solved! Jump to solution
Solution

renjith_nair
Legend
‎09-11-2020 03:19 AM

Try

 

<form>
  <label>condition</label>
  <init>
    <unset token="dif"></unset>
  </init>
  <fieldset submitButton="false">
    <input type="text" token="field1">
      <label>field1</label>
    </input>
    <input type="text" token="field2">
      <label>field2</label>
    </input>
  </fieldset>
  <row>
    <panel>
      <single>
        <search>
          <query>
            |makeresults
            |eval dif = $field1$-$field2$
            |table dif
          </query>
          <done>
            <condition match="$result.dif$ &gt; 0">
              <set token="color1">#dc4e41</set>
              <set token="status">greater than</set>
            </condition>
            <condition match="$result.dif$ &lt; 0">
              <set token="color1">#53a051</set>
              <set token="status">lesser than</set>
            </condition>
            <condition>
              <set token="color1">#0877a6</set>
              <set token="status">equal to</set>
            </condition>
          </done>
        </search>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <body>
          <div>
            <p>
              <font color="$color1$">Number $field1$ is $status$ number $field2$ ! </font>
            </p>
          </div>
        </body>
      </html>
    </panel>
  </row>
</form>

 

 

---
What goes around comes around. If it helps, hit it with Karma 🙂
Reply
Get Updates on the Splunk Community!

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...