Dashboards & Visualizations

Simple XML - How to set a default value for a token when not passed in via URL

simpkins1958
Contributor

I have a dashboard that I want to also use as a drill down target. URL for the drilldown is:

/devices?sourcetype_tok=*&device_tok=*&earliest=-2d&latest=now&form.device_tok=*

Url from list of dashboards list is:

/devices?earliest=-2d&latest=now&form.device_tok=*

sourcetype_tok token is not part of the url and charts are displaying: Search is waiting for input...

From within devices.xml I want to set the sourcetype_tok token to "*" only when it is not part of the calling url. How do I do this? Thanks.

Tags (2)
0 Karma

hardikJsheth
Motivator

You can do this via java script. Adding script to be called in form tag as follows:

<form script="t_activity.js">

Then in the JS

equire(['jquery', 'underscore', 'splunkjs/mvc', 'splunkjs/mvc/tokenutils', 'autopause_util', 'splunkjs/mvc/simplexml/ready!'],
function ($, _, mvc, tokenutils) {

submittedTokens.set('sourcetype_tok', "*")

}

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...