Deployment Architecture

How to set a token based on another token

k_harini
Communicator

Hi,
I tried to set token based on another token set from drilldown. But the condition match here is not satisfied. can someone please assist
`



|makeresults|eval test= "$form.field3$" |table test


showing

            </condition>
            <condition>
              <set token="hide">hiding</set>
            </condition>
          </preview>
        </search>
      </table>
    </panel>
  </row>`

form.field3 is set on drilldown. if it is null it is going to other condition and not immediate one. I want to hide and show two panels based on this token setting. can some one please assist?

Tags (1)
0 Karma

k_harini
Communicator

Yes.. I used depends for the below panel.. but I want to unset this when another token is set like $field4$ from different panel. That I cannot do directly.. so I tried with condition match..

0 Karma

niketn
Legend

@k_harini, if the panel is supposed to be hidden when form3 dropdown has no value selected, you can code the same directly by adding <depends="$form3$"> to your panel.

<form>
  <label>Set Unset token</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="field3" searchWhenChanged="true">
      <label></label>
      <choice value="test1">Test 1</choice>
      <choice value="test2">Test 2</choice>
    </input>
  </fieldset>
  <row depends="$field3$">
    <panel>
      <table>
        <search id="test1">
          <query>|makeresults|eval test= "$form.field3$" |table test</query>
        </search>
      </table>
    </panel>
  </row>
</form>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...