Insert an asset ID, asset name, or workspace name as a form input in Splunk AR

Use a token in a form input with Splunk AR to use an asset ID, asset name, or workspace name in other AR workspaces and Splunk dashboards. To learn more about tokens in form inputs, see Tokens in form inputs in the Splunk Enterprise Dashboards and Visualizations manual.

You must use a text form input in Splunk AR. When you scan an asset, Splunk AR replaces the input with the asset ID, asset name, or workspace name. You can then use the token for other queries in Splunk AR.

Prerequisites

Complete the following requirements before inserting an asset ID as a form input in Splunk AR:

• Install the Splunk App for AR. See Install the Splunk App for AR.
• Ensure you have the appropriate permissions. See Configure Splunk AR roles and permissions for more information.
• Have compatible dashboards on your Splunk platform instance. See Visualization support for the Connected Experiences apps in the Splunk Secure Gateway Release Notes manual for more information about compatible visualizations.
• Register an asset.

Steps

1. In Splunk Web, create a dashboard with a text form input.
2. Name the token for the form input. You can use ar.assetID, ar.assetName, or ar.workspaceName.
3. In the Splunk App for AR, register an asset.
   See Associate objects with dashboards in the Splunk App for AR to learn how to register an asset.
   
4. Associate the dashboard with the form input to the asset.
   

Scan the asset tag to view the dashboard or AR workspace. Splunk AR uses the token to replace the input in the query with the asset ID, asset name, or workspace name.