Dashboards & Visualizations

Modify the clicked field value if clicked field = "x"

lpolo
Motivator

Hi,

I have a drill down table in sideviewutils. It is working without any problem. I need to modified the value of the clicked field if the value is let's say "X".

Example:
clicked_value="$row.fields.ProgramID$"
if clicked_value = "x" then click_value = "b" else clicked_value = $row.fields.ProgramID$;

Is this possible is sideviewutils?

Thanks,
Lp

Tags (1)

sideview
SplunkTrust
SplunkTrust

Sure. You'll want to get to know the ValueSetter modules a little better. In particular the main one "ValueSetter", which has a feature where it can set values conditionally.

Take a read through the ValueSetter docs page within Sideview Utils, under "Module Documentation > The Value Setter Modules > the ValueSetter Module".

<module name="ValueSetter">
    <param name="name">modifiedValue</param>
    <param name="if.$click.value$=x">b</param>
    <param name="default">$row.fields.ProgramID$</param>

    <!-- downstream modules can access either $modifiedValue$ or $row.fields.ProgramID$ etc..  -->
  </module>

and if you want to rewrite one of the existing keys it's as simple as using the same name.

<module name="ValueSetter">
    <param name="name">row.fields.ProgramID</param>
    <param name="if.$click.value$=x">b</param>
    <param name="default">$row.fields.ProgramID$</param>


  </module>

lpolo
Motivator

Thanks,
Lp

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Now On Demand Whether you're managing complex deployments or looking to future-proof your data ...

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...