- Splunk Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Can tokens be used in dashboard fieldset?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can tokens be used in dashboard fieldset?
I would like to use tokens in dashboard fieldset. This XML code below is not working. The two tokens have been defined in JavaScript and are available in other components of the dashboard, just not the fieldset.
<fieldset submitButton="false">
<input type="time" searchWhenChanged="true">
<label>Time: from view in app</label>
<default>
<earliest>$default_earliest$</earliest>
<latest>$default_latest$</latest>
</default>
</input>
</fieldset>
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I tried more times to pass a token as a default to Time Inputs, I think that it isn't possible now!
Sorry.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fixed typo, and still not working. The token substitution happens in the HTML section fine.
Here is the url that is created by Splunk when navigating to the dashboard:
<fieldset submitButton="false">
<input type="time" searchWhenChanged="true">
<label>Time: from view in app</label>
<default>
<earliest>$default_earliest$</earliest>
<latest>$default_latest$</latest>
</default>
</input>
</fieldset>
<row>
<html>
<b>Test: $default_earliest$ - $default_latest$ </b>
</html>
</row>
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
it doesn't say latest= in the url
Not sure if that's why?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It actually does, I must not have pasted it in correctly.
:8000/en-US/app/dazzler/system_summary?earliest=%24default_earliest%24&latest=%24default_latest%24
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
this should not be so complicated. they have a doc on this.
Maybe you need to put the link in CDATA?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
is earliest misspelled? You have it $default_earlist$ instead of $default_earliest$
if that isn't it, I'll keep noodling.
Introducing the Splunk Community Dashboard Challenge!
Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...
Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...
