<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Why is my dashboard drilldown not working? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177589#M10988</link>
    <description>&lt;P&gt;@nbdesale29 for the community to assist you better please post more details on what you are trying to do where is the drilldown and what does not seem to work? What do you mean by stopped responding? Share sample code and data (mock/anonymize any sensitive information).&lt;/P&gt;

&lt;P&gt;Also rather than commenting on a 5 year old thread post a new question with all the relevant details so that it gets appropriate attention from community members.&lt;/P&gt;</description>
    <pubDate>Thu, 13 Jun 2019 01:29:32 GMT</pubDate>
    <dc:creator>niketn</dc:creator>
    <dc:date>2019-06-13T01:29:32Z</dc:date>
    <item>
      <title>Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177582#M10981</link>
      <description>&lt;P&gt;Hi Team,&lt;/P&gt;

&lt;P&gt;I have created a dashboard for the search string below:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index=e1 *Done setting IPC Handle State structures to abandoned, process exiting immediately host=c2e9nqaa1
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;And I have enabled the Drilldown option while creating the Dashboard. After that in Dashboard, if I click any bar, it is not drilling down that bar and it is not giving those results in search. I am able to click it, but it is not doing anything.&lt;/P&gt;

&lt;P&gt;Please help me here.&lt;/P&gt;

&lt;P&gt;Regards,&lt;BR /&gt;
Abilan&lt;/P&gt;</description>
      <pubDate>Fri, 26 Jun 2015 11:26:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177582#M10981</guid>
      <dc:creator>Abilan1</dc:creator>
      <dc:date>2015-06-26T11:26:15Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177583#M10982</link>
      <description>&lt;P&gt;Do post your dashboard panel's XML.&lt;/P&gt;</description>
      <pubDate>Fri, 26 Jun 2015 11:27:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177583#M10982</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2015-06-26T11:27:24Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177584#M10983</link>
      <description>&lt;P&gt;Hi Matrin.&lt;BR /&gt;
Source XML:&lt;/P&gt;

&lt;P&gt;COK_Kernel_Crash&lt;BR /&gt;
  Call Object Crash&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;panel&amp;gt;
  &amp;lt;chart&amp;gt;
    &amp;lt;title&amp;gt;Date&amp;lt;/title&amp;gt;
    &amp;lt;search&amp;gt;
      &amp;lt;query&amp;gt;| pivot App_Log11 EventObject count(EventObject) AS "Zombies" SPLITROW date_mday AS Date SPLITCOL date_mday SORT 100 date_mday ROWSUMMARY 0 COLSUMMARY 0 NUMCOLS 100 SHOWOTHER 0&amp;lt;/query&amp;gt;
      &amp;lt;earliest&amp;gt;0&amp;lt;/earliest&amp;gt;
      &amp;lt;latest&amp;gt;&amp;lt;/latest&amp;gt;
    &amp;lt;/search&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&amp;gt;ellipsisNone&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleX.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY.text"&amp;gt;Zombies&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY2.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisX.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY2.enabled"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY2.scale"&amp;gt;inherit&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart"&amp;gt;column&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleMaximumSize"&amp;gt;50&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleMinimumSize"&amp;gt;10&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleSizeBy"&amp;gt;area&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.nullValueMode"&amp;gt;gaps&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.sliceCollapsingThreshold"&amp;gt;0.01&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.stackMode"&amp;gt;default&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.style"&amp;gt;shiny&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.layout.splitSeries"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.legend.labelStyle.overflowMode"&amp;gt;ellipsisMiddle&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.legend.placement"&amp;gt;right&amp;lt;/option&amp;gt;
  &amp;lt;/chart&amp;gt;
&amp;lt;/panel&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 28 Sep 2020 20:23:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177584#M10983</guid>
      <dc:creator>Abilan1</dc:creator>
      <dc:date>2020-09-28T20:23:00Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177585#M10984</link>
      <description>&lt;P&gt;hi Abilan1,&lt;/P&gt;

&lt;P&gt;Forgiveness post all your XML code with the integrated drilldown&lt;/P&gt;</description>
      <pubDate>Fri, 26 Jun 2015 20:55:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177585#M10984</guid>
      <dc:creator>gyslainlatsa</dc:creator>
      <dc:date>2015-06-26T20:55:00Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177586#M10985</link>
      <description>&lt;P&gt;hi,&lt;BR /&gt;
this is a example of the xml drilldown code that use&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;In-Page Drilldown project1&amp;lt;/label&amp;gt;
  &amp;lt;description&amp;gt;The click in a table row display bolow a chart with the count number of host and source from the host selected&amp;lt;/description&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;!--
            Create an input to store the drilldown value. It will be hidden using custom javascript when
            the dashboard is loaded.
         --&amp;gt;
    &amp;lt;input type="text" token="Host" searchWhenChanged="true"/&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;table id="master"&amp;gt;
      &amp;lt;title&amp;gt;Display of all the Host, Source and Description&amp;lt;/title&amp;gt;
      &amp;lt;searchString&amp;gt;index=project1_index | rex "\d+\-\d+\-\d+ \d+\:\d+:\d+ (?&amp;lt;Host&amp;gt;[a-zA-Z0-9.-]+)"             
| rex max_match=0 "(?i) STRING: \"\"(?P&amp;lt;Description&amp;gt;[^\"]+)"       
| eval Source=mvindex(Description,0)        
| eval Description=mvindex(Description,1)|table Host Source Description&amp;lt;/searchString&amp;gt;
      &amp;lt;!-- Set the type of of drilldown, since we will always consume the same field, use row--&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;row&amp;lt;/option&amp;gt;
      &amp;lt;drilldown&amp;gt;
        &amp;lt;!-- Use set to specify the new token to be created.
                     Use any token from the page or from the click event to produce the value needed. --&amp;gt;
        &amp;lt;set token="Host"&amp;gt;$row.Host$&amp;lt;/set&amp;gt;
        &amp;lt;!-- If we also set the form.sourcetype the input will get updated too --&amp;gt;
        &amp;lt;set token="form.Host"&amp;gt;$row.Host$&amp;lt;/set&amp;gt;
      &amp;lt;/drilldown&amp;gt;
    &amp;lt;/table&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;!-- depends is the way we tell the content to only show when the token has a value.
             Hint: use comma separated values if the element requires more than one token. --&amp;gt;
    &amp;lt;chart id="detail" depends="$Host$"&amp;gt;
      &amp;lt;title&amp;gt;Count number of Descriptions and Sources from the Host selected: $Host$&amp;lt;/title&amp;gt;
      &amp;lt;searchString&amp;gt;index=project1_index $Host$| rex "\d+\-\d+\-\d+ \d+\:\d+:\d+ (?&amp;lt;Host&amp;gt;[a-zA-Z0-9.-]+)"             
  | rex max_match=0 "(?i) STRING: \"\"(?P&amp;amp;lt;Description&amp;amp;gt;[^\"]+)"      
 |eval Source=mvindex(Description,0)|eval Description=mvindex(Description,1)|stats count(Source), count(Description) by Host
    &amp;lt;/chart&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 26 Jun 2015 21:50:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177586#M10985</guid>
      <dc:creator>gyslainlatsa</dc:creator>
      <dc:date>2015-06-26T21:50:41Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177587#M10986</link>
      <description>&lt;P&gt;Your question's search string and this search string don't match. Make sure you've posted the right things.&lt;/P&gt;</description>
      <pubDate>Sat, 27 Jun 2015 08:37:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177587#M10986</guid>
      <dc:creator>martin_mueller</dc:creator>
      <dc:date>2015-06-27T08:37:46Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177588#M10987</link>
      <description>&lt;P&gt;Its so irritating. The drilldown is not even responding.&lt;BR /&gt;
I am in the middle of the project and it stopped responding.&lt;/P&gt;</description>
      <pubDate>Wed, 12 Jun 2019 22:18:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177588#M10987</guid>
      <dc:creator>nbdesale29</dc:creator>
      <dc:date>2019-06-12T22:18:08Z</dc:date>
    </item>
    <item>
      <title>Re: Why is my dashboard drilldown not working?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177589#M10988</link>
      <description>&lt;P&gt;@nbdesale29 for the community to assist you better please post more details on what you are trying to do where is the drilldown and what does not seem to work? What do you mean by stopped responding? Share sample code and data (mock/anonymize any sensitive information).&lt;/P&gt;

&lt;P&gt;Also rather than commenting on a 5 year old thread post a new question with all the relevant details so that it gets appropriate attention from community members.&lt;/P&gt;</description>
      <pubDate>Thu, 13 Jun 2019 01:29:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Why-is-my-dashboard-drilldown-not-working/m-p/177589#M10988</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2019-06-13T01:29:32Z</dc:date>
    </item>
  </channel>
</rss>

