I have two radio tokens generated in a dashboard Ex. Token1 Token2 Site 1 Prod Site 2 Test Site 3 I want to set a "DBConnection" token based on a combination of the two tokens. Ex. Site1 and Prod - DBConnection= Site1ConnectionProd Site1 and Test - DBConnection = Site1ConnectionTest Site2 and Prod - DBConnection = Site2ConnectionProd ... View more

I'm using Splunk IT Service Intelligence and this search: (index=mtparam mtparam=Fabwide:NON-DELETABLE sourcetype=Realtime30MinPaceByArea) OR sourcetype=*RUN_count* | stats max(RUN_COUNT) as RUNCOUNT, max(Value) as PACE | eval Delta=(PACE - RUNCOUNT) Using the Splunk search app, I see values for the three, but using ITSI, and what I believe to be the proper threshold field Delta, I am receiving no data in the threshold section. Am I doing something incorrectly? ... View more