passing timepicker from results of one table in dashboard to another table

[mouniprathi]

Hi All,

I have dashboard which shows table of exceptions that happened within in 24 hours. My table has columns App_Name and time of exception. I tokenized these into $app_name$ and as $excep_time$ so that I can pass it to another panel in same dashboard. However once I click first panel, the second panel takes should take $app_name$ and $excep_time$ as inputs and show logs for that particualr app with time picker of $excep_time$. I have no problem adding +120 seconds but when I use earliest and latest its throwing invalid input message and when I use _time>= or _time<= it still taking UI time picker but not the search time.

How do I pass time from one row to another panel and search in that passed time window

[isoutamo]

Hi
here is excellent presentation kept in Helsinki UG. https://data-findings.com/wp-content/uploads/2024/09/HSUG-20240903-Tiia-Ojares.pdf There is shown how to debug your tokens etc.
Probably you should use $form.$ tokens instead of use just $tokens$?
r. Ismo

[gcusello]

Hi @mouniprathi ,

probably the issue is in the format of the time token (it must be in epochtime!) that you are passing to the second panel,

could you share the code of your dashboard, with attention to the two searches you're using in the two panels and the earliest and latest tags in the second panel?

anyway, you have to insert the token inside the search, not in the token, something like this:

<your_search> [ | makeresults | eval earliest=relative_time($excep_time$,"+120s"), latest=$excep_time$) | fields earliest latest ]
| ...

Ciao.

Giuseppe