I am trying to display couple of Dashboard Panels only to a specific user. For that i am trying to get the username and set the token if its matches with a certain value.
But somehow if i use condition tag its not working and "have_access" token is not getting set.
<query>| rest /services/authentication/current-context splunk_server=local | eval access=if(username="kkan","True","False") | where access = True</query>
<condition match=" 'job.resultCount' != 0">
Anyone , @niketnilay please help.
Have you tried without the surrounding preview elements?
Yes, i have removed the preview tag, but getting the error..
Node <condition> is not allowed here
OK try <done> instead of <preview>