topic Re: same page drilldown in form, Splunk 5 in Dashboards & Visualizations

same page drilldown in form, Splunk 5

kdevyatov — Fri, 01 Aug 2014 09:21:26 GMT

I've got a form that takes in a parameter and displays a search as a table. After that I would like to click on one of the table rows to activate a second panel (row) of my form. The second row of the form is another table, that displays a custom search string, using clicked parameter from the first table.

At the moment clicking on a first table entry opens a new tab. What I have so far is:

    <row>
    <table>
      <searchTemplate>first search</searchTemplate>
      <title>SPLUNKSTAT Summary</title>
        <drilldown>
            <set token="lrid">$click.value2$</set>
            <link>
                <!-- need to put reference here? -->
            </link>
        </drilldown>
    </table>
  </row>
  <row>
    <table>
      <title>Drilldown for $lrid$</title>
      <searchString>index=* LRID=$lrid$</searchString>
    </table>
  </row>

How do I get drilldown to work on the same page in Splunk 5? Alternative would be drilldown to a saved search. Please advise on this potential solution as well.

Re: same page drilldown in form, Splunk 5

strive — Fri, 01 Aug 2014 10:47:09 GMT

See if something similar to this is available in splunk 5

http://answers.splunk.com/answers/113562/same-page-drilldown-splunk-6-simple-xml

Re: same page drilldown in form, Splunk 5

kdevyatov — Fri, 01 Aug 2014 11:40:13 GMT

Looked through it and it looks to me, that inpage drilldown is Splunk 6 only. Looking into saved search possible solution.

Re: same page drilldown in form, Splunk 5

kdevyatov — Fri, 01 Aug 2014 12:59:56 GMT

Made it with a separate form to forward my drilldown to.