I have a dashboard that I want to also use as a drill down target. URL for the drilldown is:
/devices?sourcetype_tok=*&device_tok=*&earliest=-2d&latest=now&form.device_tok=*
Url from list of dashboards list is:
/devices?earliest=-2d&latest=now&form.device_tok=*
sourcetype_tok token is not part of the url and charts are displaying: Search is waiting for input...
From within devices.xml I want to set the sourcetype_tok token to "*" only when it is not part of the calling url. How do I do this? Thanks.
You can do this via java script. Adding script to be called in form tag as follows:
<form script="t_activity.js">
Then in the JS
equire(['jquery', 'underscore', 'splunkjs/mvc', 'splunkjs/mvc/tokenutils', 'autopause_util', 'splunkjs/mvc/simplexml/ready!'],
function ($, _, mvc, tokenutils) {
submittedTokens.set('sourcetype_tok', "*")
}