Dashboards & Visualizations

Modify the clicked field value if clicked field = "x"

lpolo
Motivator

Hi,

I have a drill down table in sideviewutils. It is working without any problem. I need to modified the value of the clicked field if the value is let's say "X".

Example:
clicked_value="$row.fields.ProgramID$"
if clicked_value = "x" then click_value = "b" else clicked_value = $row.fields.ProgramID$;

Is this possible is sideviewutils?

Thanks,
Lp

Tags (1)

sideview
SplunkTrust
SplunkTrust

Sure. You'll want to get to know the ValueSetter modules a little better. In particular the main one "ValueSetter", which has a feature where it can set values conditionally.

Take a read through the ValueSetter docs page within Sideview Utils, under "Module Documentation > The Value Setter Modules > the ValueSetter Module".

<module name="ValueSetter">
    <param name="name">modifiedValue</param>
    <param name="if.$click.value$=x">b</param>
    <param name="default">$row.fields.ProgramID$</param>

    <!-- downstream modules can access either $modifiedValue$ or $row.fields.ProgramID$ etc..  -->
  </module>

and if you want to rewrite one of the existing keys it's as simple as using the same name.

<module name="ValueSetter">
    <param name="name">row.fields.ProgramID</param>
    <param name="if.$click.value$=x">b</param>
    <param name="default">$row.fields.ProgramID$</param>


  </module>

lpolo
Motivator

Thanks,
Lp

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...