Dashboards & Visualizations

How can i make a dropdown disappear based on a token value?

singhbc
Path Finder

I need to have a dropdown appear and disappear in a dashboard, based on a value of a token which will get set using a search query. Is there a way to accomplish that in simple XML?

0 Karma
1 Solution

jconger
Splunk Employee
Splunk Employee

Tokens work on field inputs too. Here is an example I threw together. If you set the the "Number of results to make" field to 1, the dropdown will disappear. If you set the field to a number larger than 1, the dropdown will appear.

<form>
    <label>Hide Dropdown</label>
    <description>If more than result is shown, the "Magic dropdown" will disappear.</description>
    <fieldset submitButton="true" autoRun="false">
        <input type="text" token="result_count">
            <label>Number of results to make:</label>
            <default>1</default>
        </input>
        <input type="dropdown" token="field1" depends="$show_dropdown$">
           <label>Magic dropdown:</label>
           <choice value="1">1</choice>
           <choice value="2">2</choice>
        </input>
  </fieldset>
 <row>
    <panel>
      <table>
         <search>
           <query>| makeresults count=$result_count$</query>
           <done>
             <condition match="$job.resultCount$ > 1">
               <set token="show_dropdown">true</set>
             </condition>
             <condition>
               <unset token="show_dropdown"></unset>
             </condition>
           </done>
         </search>
       </table>
     </panel>
   </row>
</form>

View solution in original post

0 Karma

jconger
Splunk Employee
Splunk Employee

Tokens work on field inputs too. Here is an example I threw together. If you set the the "Number of results to make" field to 1, the dropdown will disappear. If you set the field to a number larger than 1, the dropdown will appear.

<form>
    <label>Hide Dropdown</label>
    <description>If more than result is shown, the "Magic dropdown" will disappear.</description>
    <fieldset submitButton="true" autoRun="false">
        <input type="text" token="result_count">
            <label>Number of results to make:</label>
            <default>1</default>
        </input>
        <input type="dropdown" token="field1" depends="$show_dropdown$">
           <label>Magic dropdown:</label>
           <choice value="1">1</choice>
           <choice value="2">2</choice>
        </input>
  </fieldset>
 <row>
    <panel>
      <table>
         <search>
           <query>| makeresults count=$result_count$</query>
           <done>
             <condition match="$job.resultCount$ > 1">
               <set token="show_dropdown">true</set>
             </condition>
             <condition>
               <unset token="show_dropdown"></unset>
             </condition>
           </done>
         </search>
       </table>
     </panel>
   </row>
</form>
0 Karma

singhbc
Path Finder

why the following is not working? I made some changes.

<form>
     <label>Hide Dropdown</label>
     <description>If more than 1 result is shown, the "Magic dropdown" will disappear.</description>
     <fieldset submitButton="false" autoRun="true">

         <input type="dropdown" token="field1" depends="$show_dropdown$">
            <label>Magic dropdown:</label>
            <choice value="1">1</choice>
            <choice value="2">2</choice>
         </input>
   </fieldset>
  <row>
     <panel>
       <table>
          <search>
            <query>| rest /services/authentication/current-context splunk_server=local 
            |stats list(username) as username list(roles) as roles list(defaultApp) as defaultApp 
            | stats count by roles 
            | eval territory=substr(roles, 1, 2) 
            | head 1 
            | eval ter=case(territory="ad", 2)
            </query>
            <done>
              <condition match="ter > 1">
                <set token="show_dropdown">true</set>
              </condition>
              <condition>
                <unset token="show_dropdown"></unset>
              </condition>
            </done>
          </search>
        </table>
      </panel>
    </row>
 </form>
0 Karma

jconger
Splunk Employee
Splunk Employee

Change your condition match to the following:

<condition match="'result.ter' > 1">
    <set token="show_dropdown">true</set>
</condition>
0 Karma

singhbc
Path Finder

Thanks! works like a charm!

0 Karma

davpx
Communicator
0 Karma
Get Updates on the Splunk Community!

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...

.conf24 | Personalize your .conf experience with Learning Paths!

Personalize your .conf24 Experience Learning paths allow you to level up your skill sets and dive deeper ...

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...