Here is a full working example for your to try: {
"title": "TokenSet",
"description": "",
"inputs": {
"input_global_trp": {
"options": {
"defau...
See more...
Here is a full working example for your to try: {
"title": "TokenSet",
"description": "",
"inputs": {
"input_global_trp": {
"options": {
"defaultValue": "-24h@h,now",
"token": "global_time"
},
"title": "Global Time Range",
"type": "input.timerange"
}
},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
}
}
}
},
"visualizations": {
"global": {
"showProgressBar": true
}
}
},
"visualizations": {
"viz_6cm12FqM": {
"options": {
"markdown": "eventid: $eventid$"
},
"type": "splunk.markdown"
},
"viz_Fba9zdzF": {
"dataSources": {
"primary": "ds_60Uo5lG8"
},
"eventHandlers": [
{
"options": {
"tokens": [
{
"key": "row.event_id.value",
"token": "eventid"
}
]
},
"type": "drilldown.setToken"
}
],
"options": {},
"type": "splunk.table"
}
},
"dataSources": {
"ds_60Uo5lG8": {
"name": "Search_1",
"options": {
"query": "| makeresults count=5 \n| streamstats count\n| eval msg=\"Test message\".tostring(count)\n| eval event_id=md5(msg)"
},
"type": "ds.search"
}
},
"layout": {
"globalInputs": [
"input_global_trp"
],
"layoutDefinitions": {
"layout_1": {
"options": {
"display": "auto",
"height": 960,
"width": 1440
},
"structure": [
{
"item": "viz_6cm12FqM",
"position": {
"h": 40,
"w": 360,
"x": 20,
"y": 20
},
"type": "block"
},
{
"item": "viz_Fba9zdzF",
"position": {
"h": 120,
"w": 1360,
"x": 20,
"y": 60
},
"type": "block"
}
],
"type": "absolute"
}
},
"options": {},
"tabs": {
"items": [
{
"label": "New tab",
"layoutId": "layout_1"
}
]
}
}
} Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing