So this might be overly complicated for what I'm trying to accomplish but perhaps you all might be able to assist me. Currently I am attempting to populate a dashboard panel with different searches based on a drop-down. The drop-down is using the Dynamic Options and searching from a lookup file(.csv) with the following field names:
search_name | search
In each of the rows in the search column, a specific query is displayed. The dropdown uses the search_name column as the value and creates a token named search_name_tk.
On the dashboard, I am running a inputlookup and filtering on the search_name.
|inputlookup search_lookup.csv |search search_name="$search_name_tk$"
|stats values(search) AS "search" by search_name
From there I set a token based on the results of the inputlookup search.
<condition match=" 'job.resultCount' != 0">
<set token="search_tk">$result.search$</set>
</condition>
Here is the full search
<search>
<query>
|inputlookup search_lookup.csv |where search_name="$search_name_tk$" |stats values(search) AS "search" by search_name
</query>
<finalized>
<condition match=" 'job.resultCount' != 0">
<set token="search_tk">$result.search$</set>
</condition>
<condition>
<set token="search_tk">No result found</set>
</condition>
</finalized>
</search>
Using this I then place the $search_tk$ in the panel search. This seems to work and populates the searches from the lookup correctly, however, I am running into another issue where if there is token usage within the search in the lookup it does not seem to run properly. For example, if there is another drop-down for Computer Name on the dashboard which has computer_name_tk as the token. If said token is referenced in the search in the lookup it does not populate.
I have a feeling there is a better way to get the result I am looking for. Dynamically populating multiple searches based on a drop-down but this is the best I have been able to come up with given my limited knowledge and the answers I have been able to find here. Any assistance you all can provide would be greatly appreciated!
