Can someone confirm if there is a way to set a token in Dashboard Studio "in the background"? In classic you could set a token in the source using <init> <init> <set token="cost_per_unit">500</set> </init> But so far the only way I can see to set this token is via a text input as below but I don't really want it displayed or amendable in the dashboard     "options": {         "defaultValue": "500",         "token": "cost_per_unit"     },     "title": "Cost per Unit (USD)",     "type": "input.text" } It seems I cannot hide the input, or even place it at the bottom of the dashboard so it isn't too obvious. This seems basic stuff and I'm getting more than a little frustrated with the lack of functionality in Dashboard Studio but accept this may just be me not finding the correct documentation 🙂 So any pointers would be appreciated ... View more

OK, this is odd Search:  index=myindex Works and returns a field "Name", happily listing all values of Name as expected However any search on the name field e.g. index=myindex Name=Fred returns the error: Cannot expand lookup field 'Name' due to a reference cycle in the lookup configuration. Check search.log for details and update the lookup configuration to remove the reference cycle. Unfortunately I have no idea what to search for in the search log  Splunk support have only pointed me to this discussion and told me to re-save a specific cisco lookup: https://community.splunk.com/t5/Splunk-Cloud-Platform/Cannot-expand-lookup-field-due-to-a-reference-cycle-in-the/m-p/543455 and it isn't that as we don't have that cisco lookup table 🙂 ... View more

My biggest problem here is probably phrasing the question 🙂 I have a search in a dashboard that buckets things into a 30day time span, displayed in a barchart e.g. 30-60    -------------------------- 60-90    ------------------------------------ 120-150  ----- so that's days bucketed against a count of "things" I'd like to setup a drill down so that the panel below shows the specific "things" in the clicked bucket. Drill down is currently set to set a token, but obviously that token is being set to something like "90-120" how do I utilize this in a meaningful manner? i.e. form a search where Days >= lower limit of bucket AND <= higher limit of the bucket. Any help or hints would be appreciated 🙂 ... View more