I am looking to dynamically update the Splunk Dashboard panel title, depending on options I've chosen from a dropdown menu in Splunk Dashboard.
I've tried the following
<row> <panel> <title>Panel1: (Hardware: $hardware1$ - $unit_used$</title> ... <search base="main_search"> <query> ... | eval _unit_used = "ms" </query> <done> <set token="unit_used">$result._unit_used$</set> </done> </search>
However when the script runs, I am seeing
"Hardware: abc - $result.unit_used$".
instead of seeing
"Hardware: abc - ms"
Is there a way of achieving this?
Thanks
I suspect the title is set before any searches run so there are no results from which to pull a field value.
OTOH, if the value for the title comes from a drop-down then you should use a form token instead of a results token.
$form._unit_used$