Tokens are nothing but% variables, as in programming languages, which can be used to run dynamic queries taken from input fields or clicked events. Token name works as a reference to the information which captures value that is used to manage dashboard behavior. The delimiter used for the token is having syntax as $token_name$.

The following are a few %ways token values can be captured:

  • Tokens can be used to capture values from an input field
  • Define the token to specify actions, based on conditions based on the value of the token
  • Tokens can be defined in a search string, using values based on previously defined tokens
  • Splunk Enterprise pre-defined default tokens

The tokens can be used in %various locations and use cases on the Splunk dashboard, ...

Get Splunk: Enterprise Operational Intelligence Delivered now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.