- Find Answers
- :
- Splunk Platform
- :
- Splunk Enterprise
- :
- Using SplunkJs, by clicking button, token value is...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Using SplunkJs, by clicking button, token value is getting set but not passing to drilldown panel searches.
Can you please help on why its not working?
Steps:
1. Create Splunk js to enable token on click of a button
2. In dashboard, add a HTML button with required details (please refer the code attached)
3. Create a panel and update search with the token_name
Observation:
Token value is getting set but not sure if the value is passed to down panels or panel is not identifying the token value that has been set by clicking on button
Source code:
<dashboard script="start_tracking_1.js" version="1.1">
<label>test_dashboard 3</label>
<row id="tab_menu">
<panel>
<title>$clickedButtonValue$</title>
<html>
<button type="button" class="btn button_tab" id="StartTracking" data-value="value1">
<h2 style="text-align: center;">
<span style="color: #000000;">
<strong>Start Tracking</strong>
</span>
</h2>
</button>
</html>
</panel>
</row>
<row>
<panel>
<table>
<title>Drilldown Panel</title>
<search>
<query>index=_internal source="$clickedButtonValue$" | head 10</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="refresh.display">progressbar</option>
</table>
</panel>
</row>
</dashboard>
Splunk JS:
require([
'splunkjs/mvc',
'splunkjs/mvc/simplexml/ready!',
'jquery'
], function(mvc, ready, $) {
var defaultTokenModel = mvc.Components.getInstance('default');
// Add click event listener to button with id 'StartTracking'
$('#StartTracking').on('click', function() {
var value = $(this).data('value'); // Correct jQuery method to get data-value
console.log('Button clicked, data-value: ' + value);
defaultTokenModel.set('clickedButtonValue', value); // Set token value
});
});- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would generally recommend setting the token to the submitted token model as well as the default, i.e.
var submittedTokenModel = mvc.Components.getInstance('submitted');and
submittedTokenModel.set('clickedButtonValue', value);I'm also not entirely sure how the <dashboard> or <form> structure of a dashboard changes how tokens are managed, because the token models effect how the tokens are used when clicking submit buttons in a dashboard, where the dashboard will always be a <form> dashboard.
So, first change the dashboard to <form> and then try the changed JS - hopefully one will make the difference.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would generally recommend setting the token to the submitted token model as well as the default, i.e.
var submittedTokenModel = mvc.Components.getInstance('submitted');and
submittedTokenModel.set('clickedButtonValue', value);I'm also not entirely sure how the <dashboard> or <form> structure of a dashboard changes how tokens are managed, because the token models effect how the tokens are used when clicking submit buttons in a dashboard, where the dashboard will always be a <form> dashboard.
So, first change the dashboard to <form> and then try the changed JS - hopefully one will make the difference.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @bowesmana
It's working now post changing "dashboard" to "form" and using "submittedTokenModel" in Splunkjs.
Thank you for your response !
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
