Dashboards & Visualizations

Where is it documented that undefined tokens in searches will stop the search from running

coleman07
Path Finder

In the blog posting "Making a dashboard with tabs (and searches that run when clicked)" http://blogs.splunk.com/2015/03/30/making-a-dashboard-with-tabs-and-searches-that-run-when-clicked/ On tab 5, the author uses a fact that appears undocumented, if a token is undefined, the search will not happen. I have looked all over the web for info about this feature and wonder if someone knows where this is documented as a feature. I know it is mentioned in the article but it would be nice if this was put in documentation.

0 Karma

asimagu
Builder

I think it may not be documented as such as it is a no brainer.

If you create a search that contains a token, by its own meaning of "token" the search will wait for that token to be defined / to have a value until the search can run.

Anyway, I found this entry where kinda states that "which updates the token values all at once **and then runs the search."

http://dev.splunk.com/view/webframework-developapps/SP-CAAAEW2

0 Karma

coleman07
Path Finder

Thanks so much - yea it makes sense. It would be nice if tricks like this were documented especially for a new programmer

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Cultivate Your Career Growth with Fresh Splunk Training

Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...

Introducing a Smarter Way to Discover Apps on Splunkbase

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve ...