Hi, Splunkers,
I have a condition drilldown, when I only had one condition <condition match="$t_DrillDown$ = "*"">, it works,
but when I added another condition len($Gucid_token$) = 20, and click some field, which passes $Gucid_token$ as input, my two dashboard included here are not opened, instead a basic splunk search is opened.
<condition match="$t_DrillDown$ = "*" AND len($Gucid_token$) = 20">
<link target="_blank">
<![CDATA[
/app/optum_gvp/pivr_search?form.i_callGUID=$click.value2$&form.i_time1.earliest=$row.StartDTM_epoch$&form.i_time1.latest=$row.EndDTM_epoch$
]]>
</link>
<link target="_blank">
<![CDATA[
/app/optum_gvp/guciduuidsid_search_applied_rules_with_ors_log_kvp?form.Gucid_token_with2handlers=$click.value2$&form.field2.earliest=$row.StartDTM_epoch$&form.field2.latest=$row.EndDTM_epoch$
]]>
</link>
</condition>
why added another condition len($Gucid_token$) = 20 caused drilldown not open two dashboards , but open a basic splunk query?
thx.
Kevin
it looks I used wrong token.
after I changed $Gucid_token$ to $click.value2$, it works.
Kevin
it looks I used wrong token.
after I changed $Gucid_token$ to $click.value2$, it works.
Kevin