Dashboards & Visualizations

Dashboard panels becoming unhidden on page refresh

thisissplunk
Builder

I hide certain panels if their results are 0 in my dashboard. This works great when I load up my dashboard page initially. However, if I manually refresh the browser page, these panels seems to re-search but continue to show themselves even when they have 0 results. The only way I can get them to hide again is to go to the main dashboard link without the trailing field/values for time etc in the URL.

This is one of the panels code and the hide logic is the same throughout (within "progress" block):

  <row>
    <panel depends="$exec_show$">
      <title>Pending Executive Summaries</title>
      <table>
        <search>
          <progress>
            <condition match="'job.resultCount' > 0">
              <set token="exec_show">true</set>
            </condition>
            <condition>
              <unset token="exec_show"></unset>
            </condition>
          </progress>
          <query>
MY QUERY
          <earliest>$earliest$</earliest>
          <latest>$latest$</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">100</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">none</option>
        <option name="percentagesRow">false</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
  <row>

Of note is that the data is from an | inputlookup search command and uses global time because it's more of a DB dump than events over time.

Anyone know how to keep the panels hidden on browser refresh?

0 Karma

thisissplunk
Builder

Please ignore...

I was setting the token unintentionally in another search in the dashboard due to a poor copy/paste.

0 Karma

niketn
Legend

@thisissplunk if you have time input with token name as time_tok then corresponding earliest and latest tokens will be $time_tok.earliest$ and $time_tok.latest$ respectively, not $earliest$ or $latest$. Please verify and confirm.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

thisissplunk
Builder

I have the time picker set to Global as the time is irrelevant. The data is essentially a csv dump of rows without _time being used.

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...