Solved: Re: Setting different token value depending on tok...

light_of_sirius · ‎09-11-2020

Hello,

i am trying to set the color of writing depending on the user input, i.e., he inputs two numbers and if number 1 is larger than number 2 then the writing is green.

This problem is related to my actual problem and supposed to simplify the setting.

Feel free to point out any rudimentary/logical problems in the code, i am new to html/xml and find everything quite confusing and (weirdly?) complicated.

Thank you 🙂

<form>
  <label>condition</label>
  <init>
    <unset token="dif"></unset>
  </init>
  <fieldset submitButton="false">
    <input type="text" token="field1">
      <label>field1</label>
    </input>
    <input type="text" token="field2">
      <label>field2</label>
    </input>
  </fieldset>
  <row>
    <panel>
      <single>
        <search>
          <query>
            index = _internal
            |eval dif = $field1$-$field2$
            |table dif
          </query>
          <done>
            <condition match="$result.dif$>0">
              <set token="color1">"green"</set>
            </condition>
            <condition match="$result.dif$<0">
              <set token="color1">"red"</set>
            </condition>
          </done>
        </search>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <body>
          <div>
            <p color="$color1$">Number 1 is larger than number 2!</p>
          </div>
        </body>
      </html>
    </panel>
  </row>
</form>

renjith_nair · ‎09-11-2020

Try

<form>
  <label>condition</label>
  <init>
    <unset token="dif"></unset>
  </init>
  <fieldset submitButton="false">
    <input type="text" token="field1">
      <label>field1</label>
    </input>
    <input type="text" token="field2">
      <label>field2</label>
    </input>
  </fieldset>
  <row>
    <panel>
      <single>
        <search>
          <query>
            |makeresults
            |eval dif = $field1$-$field2$
            |table dif
          </query>
          <done>
            <condition match="$result.dif$ &gt; 0">
              <set token="color1">#dc4e41</set>
              <set token="status">greater than</set>
            </condition>
            <condition match="$result.dif$ &lt; 0">
              <set token="color1">#53a051</set>
              <set token="status">lesser than</set>
            </condition>
            <condition>
              <set token="color1">#0877a6</set>
              <set token="status">equal to</set>
            </condition>
          </done>
        </search>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <body>
          <div>
            <p>
              <font color="$color1$">Number $field1$ is $status$ number $field2$ ! </font>
            </p>
          </div>
        </body>
      </html>
    </panel>
  </row>
</form>

Happy Splunking!

View solution in original post

light_of_sirius · ‎09-11-2020

Thank you, it works.

renjith_nair · ‎09-11-2020

Try

<form>
  <label>condition</label>
  <init>
    <unset token="dif"></unset>
  </init>
  <fieldset submitButton="false">
    <input type="text" token="field1">
      <label>field1</label>
    </input>
    <input type="text" token="field2">
      <label>field2</label>
    </input>
  </fieldset>
  <row>
    <panel>
      <single>
        <search>
          <query>
            |makeresults
            |eval dif = $field1$-$field2$
            |table dif
          </query>
          <done>
            <condition match="$result.dif$ &gt; 0">
              <set token="color1">#dc4e41</set>
              <set token="status">greater than</set>
            </condition>
            <condition match="$result.dif$ &lt; 0">
              <set token="color1">#53a051</set>
              <set token="status">lesser than</set>
            </condition>
            <condition>
              <set token="color1">#0877a6</set>
              <set token="status">equal to</set>
            </condition>
          </done>
        </search>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <body>
          <div>
            <p>
              <font color="$color1$">Number $field1$ is $status$ number $field2$ ! </font>
            </p>
          </div>
        </body>
      </html>
    </panel>
  </row>
</form>

Happy Splunking!

Setting different token value depending on token value

panel

token

Announcing Scheduled Export GA for Dashboard Studio

Extending Observability Content to Splunk Cloud

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!