Splunk Search

splunk

vinod0313
Explorer

I have a dashboard like below screenshot


vinod0313_0-1598003279088.png

When I click on 1.0.9-SNAPSHOT(which is hightighted with blue colour in the screenshot)

other panel with name"features Available-1.0.9-SNAPSHOT (which is shown in red rectangular box) will appear.



my requirement is when i again select it on 1.0.9-SNAPSHOT(which is hightighted with blue colour in the screenshot)

the panel "features Available-1.0.9-SNAPSHOT should dissappear /Hide.



could you please anyone suggest me the change.



Labels (1)
0 Karma

rrovers
Contributor

Maybe this example will help you find the solution for your problem:

<dashboard>
<label>Hide/show lower panel</label>
<init>
<unset token="show"></unset>
</init>
<row>
<panel depends="$show$">
<title>show is set</title>
<table>
<search>
<query>
index=_*|
stats count by index
</query>
<progress>
<set token="show"></set>
</progress>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<drilldown>
<unset token="show"></unset>
</drilldown>
</table>
</panel>
<panel rejects="$show$">
<title>show is unset</title>
<table>
<search>
<query>
index=_*|
stats count by index
</query>
<progress>
<unset token="show"></unset>
</progress>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<drilldown>
<set token="show"></set>
<set token="tok_index">$click.value$</set>
</drilldown>
</table>
</panel>
</row>
<row depends="$show$">
<panel>
<table>
<search>
<query>
index="$tok_index$"
|stats count by index
</query>
<earliest>-15m</earliest>
<latest>now</latest>
</search>
<drilldown>
<unset token="tok_index"></unset>
</drilldown>
</table>
</panel>
</row>


</dashboard>

0 Karma

vinod0313
Explorer

Can anybody suggest me the answer for the query please?

0 Karma

niketn
Legend

@vinod0313 Can your primary table for drilldown have more than one row? If so do you want to hide the drilldown detail table only if same table row is clicked for the second time? Please add how you are setting depends token right now and how is the depends token being set right now.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...