- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

jadengoho
Builder
11-13-2018
10:48 PM
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

renjith_nair
Legend
11-14-2018
01:17 AM
@jadengoho ,
You can add a event based token on the completion of search of table by using done
.
E.g.
<dashboard>
<label>Auto Load Of Token</label>
<row>
<panel>
<table>
<search>
<query>| makeresults | eval value=1</query>
<earliest>-1s@s</earliest>
<latest>now</latest>
<done>
<set token="value_token">$result.value$</set>
</done>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
<row>
<panel>
<single>
<search>
<query>|makeresults|eval mytoken=$value_token$</query>
<earliest>-1s@s</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</single>
</panel>
</row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

renjith_nair
Legend
11-14-2018
01:17 AM
@jadengoho ,
You can add a event based token on the completion of search of table by using done
.
E.g.
<dashboard>
<label>Auto Load Of Token</label>
<row>
<panel>
<table>
<search>
<query>| makeresults | eval value=1</query>
<earliest>-1s@s</earliest>
<latest>now</latest>
<done>
<set token="value_token">$result.value$</set>
</done>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
<row>
<panel>
<single>
<search>
<query>|makeresults|eval mytoken=$value_token$</query>
<earliest>-1s@s</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</single>
</panel>
</row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂
What goes around comes around. If it helps, hit it with Karma 🙂
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
overratedkungmi
New Member
11-13-2018
10:53 PM
Please refer to this link: https://answers.splunk.com/answers/683394/how-to-put-query-result-in-token-1.html
