Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Advanced Splunk

You're reading from   Advanced Splunk Master the art of getting the maximum out of your machine data using Splunk

Arrow left icon
Product type Paperback
Published in Jun 2016
Publisher
ISBN-13 9781785884351
Length 348 pages
Edition 1st Edition
Tools
Arrow right icon
Author (1):
Arrow left icon
Ashish Kumar Tulsiram Yadav Ashish Kumar Tulsiram Yadav
Author Profile Icon Ashish Kumar Tulsiram Yadav
Ashish Kumar Tulsiram Yadav
Arrow right icon
View More author details
Toc

Table of Contents (14) Chapters Close

Preface 1. What's New in Splunk 6.3? FREE CHAPTER 2. Developing an Application on Splunk 3. On-boarding Data in Splunk 4. Data Analytics 5. Advanced Data Analytics 6. Visualization 7. Advanced Visualization 8. Dashboard Customization 9. Advanced Dashboard Customization 10. Tweaking Splunk 11. Enterprise Integration with Splunk 12. What Next? Splunk 6.4 Index

Null search swapper


We have already learned tokens and the use of eval tokens; now we will learn to use conditional tokens to set and unset the search query of a panel depending upon the result of the conditional tokens. Conditional tokens work similarly to an if loop used in programming languages. In a null search swapper, we will set tokens from the search manager to control behaviors on the page. Each search result outputs metadata around the search, the job, the server, and even the results. This feature helps users to access and set tokens from that metadata to be used throughout the page.

The null search swapper can be used to hide visualization if the result of a search query is null/empty. This kind of customization can be very useful when building highly dynamic dashboards for enterprises. For instance, the null search swapper can be used to hide a specific panel if the search result outputs nothing. So, since now the output is available instead of occupying space in the dashboard...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image