Splunk Enterprise Security
Highlighted

How to make second token value be based on choice made for first token

New Member

Token 1:

  <label>OS</label>
  <choice value="Windows">Windows</choice>
  <choice value="RedHat">RedHat</choice>

Token 2:

I want to set Token 2 to be based on whatever was selected for Token1.
For example:

If RedHat was selected for token1, make Token2: "OS01"
If Windows, was selected for token1, make Token2: "OS02"

0 Karma
Highlighted

Re: How to make second token value be based on choice made for first token

Motivator

Check out the Simple XML reference (https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML)

Specifically, the <change> (https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#change_.28for...) and <condition> (https://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#condition_.28...) attributes. You'll want to update Token 2 whenever Token 1 changes with a condition using match.

Cheers,
Jacob
0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.