Splunk Search

Change command is not working for checkbox



I am trying to assign values to the token based on the values selected in the check box.
If label="All" then I am assigning new token " t1=show all files" but this value is not been displayed in the Title .
It is displaying "$t1$" as title
But if use $Shift$ in the Title then it is showing the Values based on the checkbox clicked
Please help me in finding out the reason value is not displayed for $t1$

<input type="checkbox" token="Shift" searchWhenChanged="true">
  <choice value="*">All</choice>
  <choice value="Batch Mode">Batch</choice>
  <choice value="Online Mode">Afternoon</choice>
    <condition label="All">
        <set token="t1">show all files</set>
        <set token="t2">testing</set>

Tags (1)
0 Karma

Super Champion

Hi @madakkas,
Try this:

     <condition match="$Shift$==&quot;*&quot;">
         <set token="t1">show all files</set>
         <set token="t2">testing</set>
          <unset token="t1"></unset>
          <unset token="t2"></unset>
0 Karma



Checkboxes values passed to other panels is a known issue that you can find help for in this question:


0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...