Getting Data In

Passing a variable from search query to title in simple xml

Priya312
Explorer

Hi,
I have created a dashboard in simple xml. The alerts for every day is recorded in a lookup is shown in the dashboard. By default, the last alert will be shown in the panel.
In the title of the panel, i want to add the Date from the lookup like - "Alerts at 3-Sep-14".

Is it possible to pass the variable from the lookup to the panel title?

My code snippet:

 <row>
   <panel>
      <table> 
 <title>Daily Threshold - $Day$</title>
        <searchString>| inputlookup test.csv | search [|inputlookup test.csv | dedup Day | head 1 | table Day | return Day] | table Day,Operator,Alerts </searchString>

I want the Day value in the search query to be displayed as the title of the dashboard panel.

Tags (2)
0 Karma

gokadroid
Motivator

Why don't you use a "hidden" drop down to set a token which will reflect in title. The search in the dropdown should be exactly same as that in the panel.

0 Karma

billself
New Member

Hi Priya312

Did you ever solve this? I want to do something similar, though I have my titles in tags on my panels and want to display the latest value as part of the header to bar charts.

All the best
Bill

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...