Dashboards & Visualizations

$env:$ tokens do not resolve within evaluation of a different token?

camillak
Path Finder

I'm posting this question mostly because it's maddening. I want a dashboard that is shared between two apps to behave differently based on the value of $env:app$.

Doesn't work:

    <init>
      <eval token="isMyApp>if($env:app$=="myApp", "true", null())</eval>
    </init>

If I run a search as follows:

        <search>
          <query>| makeresults | eval foo = if($env:app|s$=="myApp", "true", null())</query>
        <done>
          <set token="showMyAppPanels">$result.foo$</set>
          <eval token="iAmBroken">if($env:app|s$=="myApp", "true", null())</eval>
          <eval token="meToo">if($env:app$=="myApp", "true", null())</eval>
        </done>
        </search>

The $result.foo$ evaluates correctly but the other two return null regardless of the value of $env:app$. So with $result.foo$, or some JS I can get where I need to be, but why does it take running an extra search or script to get there?

0 Karma

camillak
Path Finder

furthermore <set token="appContext">$env:app$</set> returns undefined.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...