Dashboards & Visualizations

Where is it documented that undefined tokens in searches will stop the search from running

coleman07
Path Finder

In the blog posting "Making a dashboard with tabs (and searches that run when clicked)" http://blogs.splunk.com/2015/03/30/making-a-dashboard-with-tabs-and-searches-that-run-when-clicked/ On tab 5, the author uses a fact that appears undocumented, if a token is undefined, the search will not happen. I have looked all over the web for info about this feature and wonder if someone knows where this is documented as a feature. I know it is mentioned in the article but it would be nice if this was put in documentation.

0 Karma

asimagu
Builder

I think it may not be documented as such as it is a no brainer.

If you create a search that contains a token, by its own meaning of "token" the search will wait for that token to be defined / to have a value until the search can run.

Anyway, I found this entry where kinda states that "which updates the token values all at once **and then runs the search."

http://dev.splunk.com/view/webframework-developapps/SP-CAAAEW2

0 Karma

coleman07
Path Finder

Thanks so much - yea it makes sense. It would be nice if tricks like this were documented especially for a new programmer

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...