Hi @eholz1 Is this what you are looking for? Sample Dashboard Studio JSON below: {
"title": "Splunk Answers - Select token",
"description": "",
"inputs": {
"input_global_trp": {
"options": {
"defaultValue": "-24h@h,now",
"token": "global_time"
},
"title": "Global Time Range",
"type": "input.timerange"
}
},
"defaults": {
"dataSources": {
"ds.o11y": {
"options": {
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
}
}
},
"ds.search": {
"options": {
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
}
}
},
"ds.spl2": {
"options": {
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
}
}
}
},
"visualizations": {
"global": {
"showProgressBar": true
}
}
},
"visualizations": {
"viz_1AKJy9Nl": {
"options": {
"markdown": "Column = $myToken_colName$ \nField Val = $myToken_val$"
},
"type": "splunk.markdown"
},
"viz_3gsbpHDP": {
"options": {
"markdown": "# Search: \nindex=_internal $myToken_colName$=$myToken_val|s$ | stats count by source, sourcetype"
},
"type": "splunk.markdown"
},
"viz_JuRIvRRn": {
"dataSources": {
"primary": "ds_wp6MIDyw"
},
"eventHandlers": [
{
"options": {
"tokens": [
{
"key": "name",
"token": "myToken_colName"
},
{
"key": "value",
"token": "myToken_val"
}
]
},
"type": "drilldown.setToken"
}
],
"options": {
"count": 20,
"dataOverlayMode": "none",
"drilldown": "none",
"showInternalFields": false,
"showRowNumbers": false
},
"type": "splunk.table"
},
"viz_tylYiXSD": {
"dataSources": {
"primary": "ds_P0dq5nsp"
},
"options": {},
"type": "splunk.table"
}
},
"dataSources": {
"ds_P0dq5nsp": {
"name": "Search_1",
"options": {
"query": "index=_internal $myToken_colName$=$myToken_val|s$ | stats count by source, sourcetype"
},
"type": "ds.search"
},
"ds_wp6MIDyw": {
"name": "Table search",
"options": {
"query": "| tstats count where index=_internal by sourcetype, host prestats=t | stats count by host, sourcetype",
"queryParameters": {
"earliest": "-24h@h",
"latest": "now",
"sampleRatio": 1
}
},
"type": "ds.search"
}
},
"layout": {
"globalInputs": [
"input_global_trp"
],
"layoutDefinitions": {
"layout_1": {
"options": {
"display": "auto",
"height": 960,
"width": 1440
},
"structure": [
{
"item": "viz_JuRIvRRn",
"position": {
"h": 250,
"w": 1440,
"x": 0,
"y": 50
},
"type": "block"
},
{
"item": "viz_1AKJy9Nl",
"position": {
"h": 50,
"w": 340,
"x": 10,
"y": 10
},
"type": "block"
},
{
"item": "viz_3gsbpHDP",
"position": {
"h": 80,
"w": 850,
"x": 20,
"y": 320
},
"type": "block"
},
{
"item": "viz_tylYiXSD",
"position": {
"h": 180,
"w": 1410,
"x": 10,
"y": 410
},
"type": "block"
}
],
"type": "absolute"
}
},
"options": {},
"tabs": {
"items": [
{
"label": "New tab",
"layoutId": "layout_1"
}
]
}
},
"applicationProperties": {
"hideEdit": false,
"hideExport": false
}
} 🌟 Did this answer help you? If so, please consider: Adding karma to show it was useful Marking it as the solution if it resolved your issue Commenting if you need any clarification Your feedback encourages the volunteers in this community to continue contributing.
... View more
