Getting Data In

Passing a variable from search query to title in simple xml

Priya312
Explorer

Hi,
I have created a dashboard in simple xml. The alerts for every day is recorded in a lookup is shown in the dashboard. By default, the last alert will be shown in the panel.
In the title of the panel, i want to add the Date from the lookup like - "Alerts at 3-Sep-14".

Is it possible to pass the variable from the lookup to the panel title?

My code snippet:

 <row>
   <panel>
      <table> 
 <title>Daily Threshold - $Day$</title>
        <searchString>| inputlookup test.csv | search [|inputlookup test.csv | dedup Day | head 1 | table Day | return Day] | table Day,Operator,Alerts </searchString>

I want the Day value in the search query to be displayed as the title of the dashboard panel.

Tags (2)
0 Karma

gokadroid
Motivator

Why don't you use a "hidden" drop down to set a token which will reflect in title. The search in the dropdown should be exactly same as that in the panel.

0 Karma

billself
New Member

Hi Priya312

Did you ever solve this? I want to do something similar, though I have my titles in tags on my panels and want to display the latest value as part of the header to bar charts.

All the best
Bill

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...