Dashboards & Visualizations

Varying behavior when assigning same value to different tokens

Builder

Hi,

I am updating two different token with same value but I am seeing differernt behavior. (probably its taking as different datatype)

      <set token="graph_time_earliest">$graph_time_earliest$ - 1500</set> 
      <set token="selection.earliest_GC">$selection.earliest_GC$ - 1500</set>

Initial Value is same for both token.

graph_time_earliest = 1506990840
selection.earliest_GC = 1506990840

OutPut:

$graph_time_earliest$  =  1506990840 - 1500
$selection.earliest_GC$ =  1506989700

In $selection.earliestGC$, its subtracting the specified value and update output. but in $graphtime_earliest$ it just append as a string. I am not sure why its taking one token as a string. Can we specify data type or its automatic?

Please suggest if I am missing something. Thank you.

0 Karma
1 Solution

SplunkTrust
SplunkTrust

@agoyal, use <eval> instead of <set> to set the token since you are evaluating expression.

   <eval token="graph_time_earliest">$graph_time_earliest$ - 1500</eval> 
   <eval token="selection.earliest_GC">$selection.earliest_GC$ - 1500</eval>

Please try out and confirm. If it does not work, do give more detailed sample of your Simple XML code as to where, $graphtimeearliest$ and $selection.earliestGC$ tokens are being set. BTW, is it $selection.earliest$ or $selection.earliestGC$?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

SplunkTrust
SplunkTrust

@agoyal, use <eval> instead of <set> to set the token since you are evaluating expression.

   <eval token="graph_time_earliest">$graph_time_earliest$ - 1500</eval> 
   <eval token="selection.earliest_GC">$selection.earliest_GC$ - 1500</eval>

Please try out and confirm. If it does not work, do give more detailed sample of your Simple XML code as to where, $graphtimeearliest$ and $selection.earliestGC$ tokens are being set. BTW, is it $selection.earliest$ or $selection.earliestGC$?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

Builder

silli mistake 😞 . Thank you @Niketnilay 🙂 Please convert it to answer so I can accept it.

0 Karma

SplunkTrust
SplunkTrust

@agoyal, we all have been there 🙂 Glad I was able to help out!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"