Dashboards & Visualizations

pass token from workflow action via search to a dashboard text input.

tonymorin
Explorer

I want to simply run a search " index=main src=1.1.1.1", then select a workflow from the event and pass the src token from the event to a text input on a dashboard. I have tried POST it and GET. in the workflow parameters, but I'm just missing something I can figure out. and help will be much apricated. Thanks in advance.

0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

HI

Can you please try this?

[My Workflow Action]
display_location = event_menu
fields = *
label = MyLabel
link.method = get
link.target = blank
link.uri = my_dashboard?form.mytext=$src$
type = link

Thanks

View solution in original post

kamlesh_vaghela
SplunkTrust
SplunkTrust

HI

Can you please try this?

[My Workflow Action]
display_location = event_menu
fields = *
label = MyLabel
link.method = get
link.target = blank
link.uri = my_dashboard?form.mytext=$src$
type = link

Thanks

tonymorin
Explorer

kamlesh_vaghela that worked. I will accept it as soon as I can.

0 Karma

niketn
Legend

@tonymorin, I have converted to answer. You can accept the same to mark this as answered. I hope you have used fields = src to make the Workflow applicable only for events with src field.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

niketn
Legend

@kamlesh_vaghela, I think field = * should be changed to

fields = src

Since the Workflow Action needs to pass on src parameter.
Other than that seems It should work, provided dashboard name is my_dashboard and text input token is mytext

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...