Dashboards & Visualizations

Simple XML - How to set a default value for a token when not passed in via URL

simpkins1958
Contributor

I have a dashboard that I want to also use as a drill down target. URL for the drilldown is:

/devices?sourcetype_tok=*&device_tok=*&earliest=-2d&latest=now&form.device_tok=*

Url from list of dashboards list is:

/devices?earliest=-2d&latest=now&form.device_tok=*

sourcetype_tok token is not part of the url and charts are displaying: Search is waiting for input...

From within devices.xml I want to set the sourcetype_tok token to "*" only when it is not part of the calling url. How do I do this? Thanks.

Tags (2)
0 Karma

hardikJsheth
Motivator

You can do this via java script. Adding script to be called in form tag as follows:

<form script="t_activity.js">

Then in the JS

equire(['jquery', 'underscore', 'splunkjs/mvc', 'splunkjs/mvc/tokenutils', 'autopause_util', 'splunkjs/mvc/simplexml/ready!'],
function ($, _, mvc, tokenutils) {

submittedTokens.set('sourcetype_tok', "*")

}

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...