On a Dashboard Studio dashboard I have a dropdown input and a rectangle that can be clicked. When the rectangle is clicked, the token value of the dropdown input token should be changed to a specified value. Is that possible in Dashboard Studio? ... View more

Is there an option in Dashboard Studio to set/reset a token that was previously set by a "Click Event" to a new value when a specific search in the Dashboard has finished running?   Just to clarify: I know that I can access tokens from the search with $search name:result.<field>$ or other tokens like $search name:job.done$. What I would need is to set a token when a search is done    Example: Token "tok_example" has the default value 0 With the click on a button (click event) in the dashboard the token "tok_example" is set to value 1 This (the value 1 of the token "tok_example") triggers a search in the dashboard to run After the search is finished, I want to set the token "tok_example" back to it's original value 0 (without any additional interaction by the user with the dashboard)   Step 4 is the part I don't know how to do in Dashboard Studio. Is there a solution for that? ... View more

I have a Dashboard Studio Dashboard and want to set a token from an input (like text input or dropdown input) triggered by the interaction with another element within the dashboard.   I already tried to do that with the interaction --> Set Token option and specified the token name as "form.tokenname". This did not work, the value of the token was not changed.   Is there a way to achieve that in Dashboard Studio like it works in Classic XML Dashboard by setting the token with "form.tokenname"? ... View more

Hello, at the moment we are indexing JSON files in Splunk and then rename the fields with a Field Alias function. This leads to the problem, that we cannot use tStats on these renamed fields anymore.   Now to the question: Is there a way to rename the fields with splunk before indexing the data? The goal is that we can use tStats on all fields with the new renamed names. ... View more

I would like to use the "Log Event" alert action to store all fields that are in the result of the search into an index.   Is there a token (like $result.fieldname$) which gives back not only one specified field of the result but all fields? ... View more

Hi, I want to change the default value of the specific ttl values for each action that can be triggered from an alert. Especially I'm asking how to change the default value of the "action.lookup.ttl" parameter? I know how to set it for each saved search individually but not how to change the default value. ... View more

Hi, let me try to explain my problem. I have a main search with a selected timerange (typically "last 4 hours") which is selected with the time picker. In addition, I join a subsearch where I want to calculate the average of some values with a bigger time range (typically "last 7 days"). To do that I use the earliest and latest commands in the subsearch. Is it somehow possible to get/access the values of info_min_time and info_max_time (which the addinfo command produces) from the main search into the subsearch? ... View more

Hi, is it possible to hide the description of the dashboard? I found the command to hide the title including the description but I just want to hide the description. ... View more