topic Re: Requesting help with capturing the fieldname in Splunk Enterprise

Requesting help with capturing the fieldname

dnv007 — Fri, 20 Nov 2020 08:12:06 GMT

Hi Everyone! Hope you all are staying safe..

I am currently working on a splunk health dashboard which is using the Status indicator app and .js scripts.

1) The task at hand is to capture the fieldname. Referencing the screenshot(highlighted in yellow - Screenshot1), when clicking on "4268" it should capture the value "Anti Virus Protected". Since this is also the "split by" field i tried all options available like click.value,click.name2,click.name1 etc and none of them seem to capture the value "Anti Virus Protected".

Could someone please help me in achieving this? And also help me understand why theclick.name,name2 etc is not working?

Re: Requesting help with capturing the fieldname

ITWhisperer — Fri, 20 Nov 2020 08:29:09 GMT

Can you share the SimpleXML you have used so far?

Re: Requesting help with capturing the fieldname

dnv007 — Mon, 17 May 2021 10:57:38 GMT

<code>

Re: Requesting help with capturing the fieldname

ITWhisperer — Fri, 20 Nov 2020 09:19:13 GMT

Possibly doesn't support drilldowns? Have you tried other sorts of drilldown other than token setting?

Re: Requesting help with capturing the fieldname

dnv007 — Fri, 20 Nov 2020 09:24:28 GMT

I definitely do get the below warning:

Could you elaborate on what you mean by "other sorts of drilldown" please?

It is vital that i capture the fieldname cause i have to build further drilldowns that open on another tab that depend on the fieldname clicked.

Please suggest.

Thanks for your time.

Re: Requesting help with capturing the fieldname

ITWhisperer — Fri, 20 Nov 2020 09:58:02 GMT

Other drilldowns could be links to other pages for example. Having said that, the warning message probably means these won't work either. Have you considered using a different visualisation such as "single" which might give you something close to what you have.

Re: Requesting help with capturing the fieldname

dnv007 — Fri, 20 Nov 2020 11:08:23 GMT

No haven't considered that! Could you please share any documentation or links to the "single" you are referring to please? An aspiring developer.. please pardon me..

Also, is there any way i could achieve the same through .js maybe?

Re: Requesting help with capturing the fieldname

ITWhisperer — Fri, 20 Nov 2020 11:13:04 GMT

LMGTFY

Re: Requesting help with capturing the fieldname

dnv007 — Fri, 20 Nov 2020 11:33:53 GMT

Thank you! But this might not work as there are many other requirements it does not match.. Thank you so much for your time and quick responses.