Dashboards & Visualizations

Token Not Working when Adding JSON Values

g038123
Explorer

Hello,

Hoping for some help, I have a simple Dashboard that allows a user to select  specific geography to return results for that geo. The search is based off of a SQL query and uses tokens to determine the correct geography.

The report has been working perfectly for a long time, recently we had an upgrade to our application that added JSON columns to our DB and moved some of the fields I was returning into the JSON clob data field.

I updated the query to extract the necessary JSON fields, which works, however, now after adding the JSON details to the query, the token is no longer working. I keep getting "Search is Waiting for Input".

I have tried to move the connection argument, before and after the SQL query, see below, neither seemed to

work.

| dbxquery query="blah blah" connection=geography

| dbxquery connection=geography query="blah blah"

Hoping someone can point out what I need to add or update, so that the token is recognized/working again.

Thank you in advance for any assistance.

Labels (1)
0 Karma
1 Solution

renjith_nair
Legend

Would it be possible to share some sample data and part of your dashboard xml ?

It could be due to various issues including presence of a $ sign in your data which needs to be escaped while using in token.

---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

renjith_nair
Legend

Would it be possible to share some sample data and part of your dashboard xml ?

It could be due to various issues including presence of a $ sign in your data which needs to be escaped while using in token.

---
What goes around comes around. If it helps, hit it with Karma 🙂

g038123
Explorer

Hi Sorry for the delay in responding. You have helped me immensely.

That indeed was the issues. Thank you so much for the help!

0 Karma

renjith_nair
Legend

@g038123, glad it worked.

Appreciate if you could upvote ( 👍 ) and accept it as a solution to close the thread.

---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...