About AleCanzo

AleCanzo

Hi everyone, What's the value of a token if is not set in an input? An empty string, null() or? I was trying to do something like: | eval user=if(isnull("$user_token$"), user, "$user_token$"), but it doesn't work.

AleCanzo

Thank you @bowesmana !

AleCanzo

Hi, i'm searching for a way to modify my app/dashboard to be able to modify the entries of a table (such as delete/duplicate/copy/multiselect rows). Any suggestions? Maybe i have to look at the scripts from the lookup editor app? I really don't know where to start. I know how to write in python but i haven't created a script already. Thanks 🙂 Dashboard view

AleCanzo

No, i'm trying to do something different. Every time my Alert is triggered, i want to output some fields (like severity, expiration, ss_name...) to a kvs lookup. Then i want to see the lookup on a dashboard: i'm doing this cause i'm trying to create an app where i can manage alerts (like Alert Manager). Of course i can just create a dashboard where i table all the events from the Alert, but then i'm not sure i'm going to be able to modify the table.

AleCanzo

Hi, this is my first interaction with Splunk Community so be patient please 🙂 I'm trying to output some fields from an Alert to a kvs lookup. I'm using a Lookup editor app and a KVS app, but probably i'm missing some theory. Thanks!

Posts	5
Solutions	0
Karma Given	17
Karma Received	0
Member Since	‎06-11-2025

Online Status	Online
Date Last Visited	43m ago

What's the value of a token if is not set in an in...

How to modify a dashboard

There is a way to send some fileds of an alert to ...

What's the value of a token if is not set in an in...

Re: How to modify a dashboard

How to modify a dashboard

Re: There is a way to send some fileds of an alert...

There is a way to send some fileds of an alert to ...

Are you a member of the Splunk Community?