<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to create a table that, when I click on a value, drills down to a pie chart in the same dashboard? in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-table-that-when-I-click-on-a-value-drills-down/m-p/213459#M13321</link>
    <description>&lt;P&gt;Hi to everyone&lt;/P&gt;

&lt;P&gt;I need a dashboard with a table and a chart: &lt;/P&gt;

&lt;P&gt;1) In the table, a list with a count for dest_ip from Cisco ASA,&lt;/P&gt;

&lt;P&gt;2) When I click an ip, I need a pie chart in the same dashboard, without reload, with top src_ip. &lt;/P&gt;

&lt;P&gt;How can I do this?&lt;/P&gt;

&lt;P&gt;I'll be thankful for any help&lt;/P&gt;

&lt;P&gt;Best regards&lt;/P&gt;</description>
    <pubDate>Wed, 04 Nov 2015 20:39:52 GMT</pubDate>
    <dc:creator>rubeniturrieta</dc:creator>
    <dc:date>2015-11-04T20:39:52Z</dc:date>
    <item>
      <title>How to create a table that, when I click on a value, drills down to a pie chart in the same dashboard?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-table-that-when-I-click-on-a-value-drills-down/m-p/213459#M13321</link>
      <description>&lt;P&gt;Hi to everyone&lt;/P&gt;

&lt;P&gt;I need a dashboard with a table and a chart: &lt;/P&gt;

&lt;P&gt;1) In the table, a list with a count for dest_ip from Cisco ASA,&lt;/P&gt;

&lt;P&gt;2) When I click an ip, I need a pie chart in the same dashboard, without reload, with top src_ip. &lt;/P&gt;

&lt;P&gt;How can I do this?&lt;/P&gt;

&lt;P&gt;I'll be thankful for any help&lt;/P&gt;

&lt;P&gt;Best regards&lt;/P&gt;</description>
      <pubDate>Wed, 04 Nov 2015 20:39:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-table-that-when-I-click-on-a-value-drills-down/m-p/213459#M13321</guid>
      <dc:creator>rubeniturrieta</dc:creator>
      <dc:date>2015-11-04T20:39:52Z</dc:date>
    </item>
    <item>
      <title>Re: How to create a table that, when I click on a value, drills down to a pie chart in the same dashboard?</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-table-that-when-I-click-on-a-value-drills-down/m-p/213460#M13322</link>
      <description>&lt;P&gt;Try this and change queries&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;form&amp;gt;
  &amp;lt;label&amp;gt;In-Page Drilldown with Perma-linking&amp;lt;/label&amp;gt;
  &amp;lt;fieldset submitButton="false"&amp;gt;
    &amp;lt;!--
            Create an input to store the drilldown value. It will be hidden using custom javascript when
            the dashboard is loaded.
         --&amp;gt;
    &amp;lt;input type="text" token="sourcetype" searchWhenChanged="true"&amp;gt;&amp;lt;/input&amp;gt;
  &amp;lt;/fieldset&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;table id="master"&amp;gt;
      &amp;lt;title&amp;gt;Master&amp;lt;/title&amp;gt;
      &amp;lt;searchString&amp;gt;index=_internal | stats count by sourcetype&amp;lt;/searchString&amp;gt;
      &amp;lt;earliestTime&amp;gt;-60m@m&amp;lt;/earliestTime&amp;gt;
      &amp;lt;latestTime&amp;gt;now&amp;lt;/latestTime&amp;gt;
      &amp;lt;!-- Set the type of of drilldown, since we will always consume the same field, use row--&amp;gt;
      &amp;lt;option name="drilldown"&amp;gt;row&amp;lt;/option&amp;gt;
      &amp;lt;drilldown&amp;gt;
        &amp;lt;!-- Use set to specify the new token to be created.
                     Use any token from the page or from the click event to produce the value needed. --&amp;gt;
        &amp;lt;set token="sourcetype"&amp;gt;$row.sourcetype$&amp;lt;/set&amp;gt;
        &amp;lt;!-- If we also set the form.sourcetype the input will get updated too --&amp;gt;
        &amp;lt;set token="form.sourcetype"&amp;gt;$row.sourcetype$&amp;lt;/set&amp;gt;
      &amp;lt;/drilldown&amp;gt;
    &amp;lt;/table&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;!-- depends is the way we tell the content to only show when the token has a value.
             Hint: use comma separated values if the element requires more than one token. --&amp;gt;
    &amp;lt;chart id="detail" depends="$sourcetype$"&amp;gt;
      &amp;lt;title&amp;gt;Detail: $sourcetype$&amp;lt;/title&amp;gt;
      &amp;lt;search&amp;gt;
        &amp;lt;query&amp;gt;index=_internal sourcetype=$sourcetype$ | timechart count&amp;lt;/query&amp;gt;
        &amp;lt;earliest&amp;gt;-60m@m&amp;lt;/earliest&amp;gt;
        &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
      &amp;lt;/search&amp;gt;
      &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&amp;gt;ellipsisNone&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&amp;gt;0&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisTitleX.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisTitleY.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisTitleY2.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisX.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisY.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisY2.enabled"&amp;gt;0&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.axisY2.scale"&amp;gt;inherit&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart"&amp;gt;pie&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.bubbleMaximumSize"&amp;gt;50&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.bubbleMinimumSize"&amp;gt;10&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.bubbleSizeBy"&amp;gt;area&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.nullValueMode"&amp;gt;gaps&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.showDataLabels"&amp;gt;none&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.sliceCollapsingThreshold"&amp;gt;0.01&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.stackMode"&amp;gt;default&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.chart.style"&amp;gt;shiny&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.layout.splitSeries"&amp;gt;0&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.layout.splitSeries.allowIndependentYRanges"&amp;gt;0&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.legend.labelStyle.overflowMode"&amp;gt;ellipsisMiddle&amp;lt;/option&amp;gt;
      &amp;lt;option name="charting.legend.placement"&amp;gt;right&amp;lt;/option&amp;gt;
    &amp;lt;/chart&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/form&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 11 Jan 2016 13:34:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/How-to-create-a-table-that-when-I-click-on-a-value-drills-down/m-p/213460#M13322</guid>
      <dc:creator>NOUMSSI</dc:creator>
      <dc:date>2016-01-11T13:34:22Z</dc:date>
    </item>
  </channel>
</rss>

