Splunk Search

splunk

vinod0313
Explorer

I have a dashboard like below screenshot


vinod0313_0-1598003279088.png

When I click on 1.0.9-SNAPSHOT(which is hightighted with blue colour in the screenshot)

other panel with name"features Available-1.0.9-SNAPSHOT (which is shown in red rectangular box) will appear.



my requirement is when i again select it on 1.0.9-SNAPSHOT(which is hightighted with blue colour in the screenshot)

the panel "features Available-1.0.9-SNAPSHOT should dissappear /Hide.



could you please anyone suggest me the change.



Labels (1)
0 Karma

rrovers
Contributor

Maybe this example will help you find the solution for your problem:

<dashboard>
<label>Hide/show lower panel</label>
<init>
<unset token="show"></unset>
</init>
<row>
<panel depends="$show$">
<title>show is set</title>
<table>
<search>
<query>
index=_*|
stats count by index
</query>
<progress>
<set token="show"></set>
</progress>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<drilldown>
<unset token="show"></unset>
</drilldown>
</table>
</panel>
<panel rejects="$show$">
<title>show is unset</title>
<table>
<search>
<query>
index=_*|
stats count by index
</query>
<progress>
<unset token="show"></unset>
</progress>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<drilldown>
<set token="show"></set>
<set token="tok_index">$click.value$</set>
</drilldown>
</table>
</panel>
</row>
<row depends="$show$">
<panel>
<table>
<search>
<query>
index="$tok_index$"
|stats count by index
</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<drilldown>
<unset token="tok_index"></unset>
</drilldown>
</table>
</panel>
</row>


</dashboard>

0 Karma

vinod0313
Explorer

Can anybody suggest me the answer for the query please?

0 Karma

niketn
Legend

@vinod0313 Can your primary table for drilldown have more than one row? If so do you want to hide the drilldown detail table only if same table row is clicked for the second time? Please add how you are setting depends token right now and how is the depends token being set right now.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...