- Splunk Answers
- :
- Using Splunk
- :
- Dashboards & Visualizations
- :
- Re: How do I do addition in a Splunk HTML form?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't think you can directly do calculation in HTML, for your requirement can't you do calculation in splunk query and use the result token in html?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can do that in SimpleXML using . Where to place the depends on where your tokens come from. In case they come from an input:
<form>
<label>Dashboard</label>
<fieldset submitButton="false">
<input type="text" token="tok_mem">
<label>Memory</label>
<change>
<eval token="tok_sum">$tok_mem$ + $tok_swap$</eval>
</change>
</input>
<input type="text" token="tok_swap">
<label>Swap</label>
<change>
<eval token="tok_sum">$tok_mem$ + $tok_swap$</eval>
</change>
</input>
</fieldset>
<row>
<panel>
<html>
<ul>
<li>
<p>Ram Per Server: $tok_sum$</p>
</li>
</ul>
</html>
</panel>
</row>
</form>
You could do that on Search as well, ... see Splunk>docs on token usage
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't think you can directly do calculation in HTML, for your requirement can't you do calculation in splunk query and use the result token in html?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes! Thanks. I'm not sure if it's the best way or not, and am definitely open to hearing other answers/modifications. This is what I did:
<panel>
<search>
<query>
| makeresults | eval baz=$a$+$b$| table baz
</query>
<preview>
<set token="baz">$result.baz$</set>
</preview>
</search>
<html>
<p><b>section title</b></p>
<ul>
<li>
<p>field: <a>$baz$</a></p>
</li>
</ul>
</html>
</panel>
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can always hide any panel or table by using depends="$hidden$", for eg:-
<table depends="$hidden$">
will hide the table from displaying.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks once more. For anyone else looking for the answer on this page, @vijeta's comment above references my code before I edited it, where previously I had the query run in a table and was looking for a way to hide it.
Thus, there are two ways of accomplishing the answer to this question: run the query in a table and hide it, or just put your query in the same panel as the html form like I did in my edited comment.
Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!
They're back! Join the SplunkTrust and MVP at .conf24
Enterprise Security Content Update (ESCU) | New Releases
