How to send a specific value to another dashboard ...

alaaelbahrawy · ‎12-31-2019

Can I use the Splunk Drill down to send the data from a dashboard to another dashboard if the data increased than a specific threshold?

For example, Dashboard A has a Value 90% and the threshold is 80% then it sends the data to Dashboard B.

kamlesh_vaghela · ‎12-31-2019

@alaaelbahrawy

Here I suggest to keep Dashboard A's Value and Threashold logic in Dashboard B.
Like...

Copy search from Dashboard A and use it to set token in Dashboard B.

See below sample XML for same. Here I have used search from Dashboard A (for example) and add condition in search as per your requirement (like. I added in below XML | where Value=90 AND threshold=80). You can see a token tkn_data which is set on the basis of search results. You can use this tkn_data token in your dashboard. You can validate the XML by modifying Value AND threshold value in search.

<form>
  <label>Dashboard Example</label>
  <search>
          <query>| makeresults | eval Value=900,threshold=80 | rename COMMENT as "This is sample of your search" | fields Value threshold| where Value=90 AND threshold=80 </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <done>
            <condition match="'job.resultCount' == 0">
              <set token="tkn_data">Other Value</set>  
            </condition>
            <condition>
              <set token="tkn_data">My Expected Value</set>
            </condition>
          </done>
        </search>
  <row>
    <panel>
      <html>
        <b> Results from search manager: $tkn_data$</b>
      </html>
    </panel>
  </row>
</form>

I hope this will help you.

Thanks

How to send a specific value to another dashboard without clicking on the value

Observability | Use Synthetic Monitoring for Website Metadata Verification

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

.conf24 | Personalize your .conf experience with Learning Paths!