Dashboards & Visualizations

Tokens not working in the panels

aditsss
Motivator

Hi Everyone,

I have two dropdowns and they are not working in the panels

Can someone guide me on that:

Below is my current code:

Dropdown:

<input type="dropdown" token="req" searchWhenChanged="true">
<label>Request Type</label>
<choice value="*">All Request_Type</choice>
<search>
<query>index=abc sourcetype=xyz source="user.log" process-groups | rex "\)\s+(?&lt;Request_Type&gt;[^ ]+)"|stats count by Request_Type </query>
<earliest>-60d@d</earliest>
<latest>now</latest>
</search>
<fieldForLabel>Request_Type</fieldForLabel>
<fieldForValue>Request_Type</fieldForValue>
<prefix>Request_Type="</prefix>
<suffix>"</suffix>
<initialValue>*</initialValue>
<default>*</default>
</input>
<input type="dropdown" token="usr" searchWhenChanged="true">
<label>NiFi_Users</label>
<choice value="*">All Users</choice>
<search>
<query>index=abc sourcetype=xyz source="user.log" process-groups | rex "\&lt;(?&lt;Request_User&gt;\w+)\&gt;\&lt;"|stats count by Request_User</query>
<earliest>-60d@d</earliest>
<latest>now</latest>
</search>
<fieldForLabel>Request_User</fieldForLabel>
<fieldForValue>Request_User</fieldForValue>
<prefix>Request_User="</prefix>
<suffix>"</suffix>
<initialValue>*</initialValue>
<default>*</default>
</input>

Panel Code:

1st PANEL

<panel>
<chart>
<title>NiFi_Operations</title>
<search>
<query>index=abc sourcetype=uio source="user.log" process-groups |rex "\)\s+(?&lt;Request_Type&gt;[^ ]+)"|chart count(Request_Type) as "Request- Types" by Request_Type |search $req$ $usr$</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>

2nd Panel

<panel>
<chart>
<title>NiFi_Users</title>
<search>
<query>index=abc sourcetype=xyz source="user.log" process-groups |rex "\&lt;(?&lt;Request_User&gt;\w+)\&gt;\&lt;"|chart count(Request_User) as "Users" by Request_User|search $usr$ $req$</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
</search>

I have extracted the field Request User and RequestType.

Can someone guide me why the t

 

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...