<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Drilldown and hidden column in line chart in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246932#M15389</link>
    <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I am trying to make a drilldown from a hidden column in a line chart. &lt;BR /&gt;
If I hide the columns (with &amp;lt;option name="charting.data.fieldShowList"&amp;gt;["MaxError"]&amp;lt;/option&amp;gt;), the tokens are not replaced by its value in the target URL.&lt;BR /&gt;
If I don't hide the columns, the drilldown works fine, but the chart is unreadable because the Y scale is adapted to the START_TIME/END_TIME columns.&lt;/P&gt;

&lt;P&gt;Is there a way to pass value of hidden columns into drilldown links?&lt;/P&gt;

&lt;P&gt;Here is my code so far...&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;chart depends="$favg_tok$"&amp;gt;
    &amp;lt;title&amp;gt;Evolution of average normalized error of $measurement_label$ by field.&amp;lt;/title&amp;gt;
    &amp;lt;search&amp;gt;
      &amp;lt;query&amp;gt;index="sca_rs_index2" sourcetype=recordspecif | stats avg(ERR_DOSE_PRIM) AS FAVG_ERR_DOSE_PRIM,  earliest(_time) AS START_TIME, latest(_time) AS END_TIME by FIELD_ID | sort START_TIME | streamstats COUNT(FIELD_ID) AS INDEX | chart max(FAVG_N$favg_tok$) AS MaxError, first(FIELD_ID) AS FIELD_ID, min(START_TIME) AS START_TIME, max(END_TIME) AS END_TIME over INDEX&amp;lt;/query&amp;gt;
    &amp;lt;/search&amp;gt;
    &amp;lt;option name="charting.chart"&amp;gt;line&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY2.enabled"&amp;gt;false&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&amp;gt;ellipsisNone&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleX.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY2.visibility"&amp;gt;collapsed&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.minorTickVisibility"&amp;gt;show&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisX.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY2.scale"&amp;gt;inherit&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleMaximumSize"&amp;gt;50&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleMinimumSize"&amp;gt;2&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleSizeBy"&amp;gt;area&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.nullValueMode"&amp;gt;gaps&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.sliceCollapsingThreshold"&amp;gt;0.001&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.stackMode"&amp;gt;default&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.style"&amp;gt;shiny&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.layout.splitSeries"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.legend.labelStyle.overflowMode"&amp;gt;ellipsisMiddle&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.legend.placement"&amp;gt;right&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.data.count"&amp;gt;1000&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.data.fieldShowList"&amp;gt;["MaxError"]&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleX.text"&amp;gt;Field index&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY.text"&amp;gt;$measurement_label$&amp;lt;/option&amp;gt;
    &amp;lt;drilldown target="New Window"&amp;gt;
      &amp;lt;link&amp;gt;&amp;lt;![CDATA[/app/new_sc_pdu/sc_field_analysis?form.field_id=$row.FIELD_ID$&amp;amp;form.lavg_tok=$favg_tok$&amp;amp;earliest=$row.START_TIME$&amp;amp;latest=$row.END_TIME$]]&amp;gt;&amp;lt;/link&amp;gt;
    &amp;lt;/drilldown&amp;gt;
  &amp;lt;/chart&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Tue, 29 Sep 2020 07:58:36 GMT</pubDate>
    <dc:creator>pduflot</dc:creator>
    <dc:date>2020-09-29T07:58:36Z</dc:date>
    <item>
      <title>Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246932#M15389</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I am trying to make a drilldown from a hidden column in a line chart. &lt;BR /&gt;
If I hide the columns (with &amp;lt;option name="charting.data.fieldShowList"&amp;gt;["MaxError"]&amp;lt;/option&amp;gt;), the tokens are not replaced by its value in the target URL.&lt;BR /&gt;
If I don't hide the columns, the drilldown works fine, but the chart is unreadable because the Y scale is adapted to the START_TIME/END_TIME columns.&lt;/P&gt;

&lt;P&gt;Is there a way to pass value of hidden columns into drilldown links?&lt;/P&gt;

&lt;P&gt;Here is my code so far...&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;chart depends="$favg_tok$"&amp;gt;
    &amp;lt;title&amp;gt;Evolution of average normalized error of $measurement_label$ by field.&amp;lt;/title&amp;gt;
    &amp;lt;search&amp;gt;
      &amp;lt;query&amp;gt;index="sca_rs_index2" sourcetype=recordspecif | stats avg(ERR_DOSE_PRIM) AS FAVG_ERR_DOSE_PRIM,  earliest(_time) AS START_TIME, latest(_time) AS END_TIME by FIELD_ID | sort START_TIME | streamstats COUNT(FIELD_ID) AS INDEX | chart max(FAVG_N$favg_tok$) AS MaxError, first(FIELD_ID) AS FIELD_ID, min(START_TIME) AS START_TIME, max(END_TIME) AS END_TIME over INDEX&amp;lt;/query&amp;gt;
    &amp;lt;/search&amp;gt;
    &amp;lt;option name="charting.chart"&amp;gt;line&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY2.enabled"&amp;gt;false&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&amp;gt;ellipsisNone&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleX.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY.visibility"&amp;gt;visible&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY2.visibility"&amp;gt;collapsed&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisLabelsX.minorTickVisibility"&amp;gt;show&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisX.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY.scale"&amp;gt;linear&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisY2.scale"&amp;gt;inherit&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleMaximumSize"&amp;gt;50&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleMinimumSize"&amp;gt;2&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.bubbleSizeBy"&amp;gt;area&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.nullValueMode"&amp;gt;gaps&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.sliceCollapsingThreshold"&amp;gt;0.001&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.stackMode"&amp;gt;default&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.chart.style"&amp;gt;shiny&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.layout.splitSeries"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.legend.labelStyle.overflowMode"&amp;gt;ellipsisMiddle&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.legend.placement"&amp;gt;right&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.data.count"&amp;gt;1000&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.data.fieldShowList"&amp;gt;["MaxError"]&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleX.text"&amp;gt;Field index&amp;lt;/option&amp;gt;
    &amp;lt;option name="charting.axisTitleY.text"&amp;gt;$measurement_label$&amp;lt;/option&amp;gt;
    &amp;lt;drilldown target="New Window"&amp;gt;
      &amp;lt;link&amp;gt;&amp;lt;![CDATA[/app/new_sc_pdu/sc_field_analysis?form.field_id=$row.FIELD_ID$&amp;amp;form.lavg_tok=$favg_tok$&amp;amp;earliest=$row.START_TIME$&amp;amp;latest=$row.END_TIME$]]&amp;gt;&amp;lt;/link&amp;gt;
    &amp;lt;/drilldown&amp;gt;
  &amp;lt;/chart&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 07:58:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246932#M15389</guid>
      <dc:creator>pduflot</dc:creator>
      <dc:date>2020-09-29T07:58:36Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246933#M15390</link>
      <description>&lt;P&gt;Use the &amp;lt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/6.3.0/Viz/PanelreferenceforSimplifiedXML#fields"&gt;fields&lt;/A&gt;&amp;gt; option to determine which fields are displayed; they should preserve your data for drilldown.&lt;/P&gt;</description>
      <pubDate>Mon, 30 Nov 2015 15:07:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246933#M15390</guid>
      <dc:creator>jeffland</dc:creator>
      <dc:date>2015-11-30T15:07:29Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246934#M15391</link>
      <description>&lt;P&gt;I worked around this problem by sending all 'hidden data' to the y2 axis and by setting a range of [0-0] to the y2 axis.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;"charting.axisY2.enabled": "true",
"charting.axisLabelsY2.axisVisibility": "hide",
"charting.axisY2.fields": "FIELD_ID,FRACTION_ID,INDEX,START_TIME,END_TIME",
"charting.axisY2.minimumNumber": "0",
"charting.axisY2.maximumNumber": "0",
"charting.axisTitleY2.visibility": "collapsed",
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 11 Jan 2016 14:39:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246934#M15391</guid>
      <dc:creator>pduflot</dc:creator>
      <dc:date>2016-01-11T14:39:38Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246935#M15392</link>
      <description>&lt;P&gt;According to the docs the fields options only applies to table not to chart. Anyway, I could not make it work.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Jan 2016 14:40:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246935#M15392</guid>
      <dc:creator>pduflot</dc:creator>
      <dc:date>2016-01-11T14:40:16Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246936#M15393</link>
      <description>&lt;P&gt;Yes, you're right - sorry about that. I'm moving my answer to a comment so others see this question unanswered.&lt;BR /&gt;
PS: just noticed you already have a solution. You should accept it!&lt;/P&gt;</description>
      <pubDate>Tue, 12 Jan 2016 08:45:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246936#M15393</guid>
      <dc:creator>jeffland</dc:creator>
      <dc:date>2016-01-12T08:45:22Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246937#M15394</link>
      <description>&lt;P&gt;thank you very much for posting this.&lt;/P&gt;

&lt;P&gt;I do have the same problem, tried your settings but didn't work.&lt;/P&gt;

&lt;P&gt;Can you please paste the whole Chart code here ?&lt;BR /&gt;
or at least all the necessary  &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;option name="......
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;because I guess you did at least remove the&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt; &amp;lt;option name="charting.data.fieldShowList"&amp;gt;["MaxError"]&amp;lt;/option&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;option because of drill-down invalidity; and may be others too&lt;/P&gt;

&lt;P&gt;thank you very much&lt;BR /&gt;
best regards&lt;BR /&gt;
Altin&lt;/P&gt;</description>
      <pubDate>Mon, 21 Aug 2017 19:23:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246937#M15394</guid>
      <dc:creator>altink</dc:creator>
      <dc:date>2017-08-21T19:23:40Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246938#M15395</link>
      <description>&lt;P&gt;Here is the full list of option:&lt;/P&gt;

&lt;P&gt;"charting.layout.splitSeries": "0",&lt;BR /&gt;
"charting.axisLabelsY2.axisVisibility": "hide", &lt;BR /&gt;
"charting.chart": "line",&lt;BR /&gt;
"charting.axisY2.fields": "FRACTION_ID,FIELD_ID,START_TIME,END_TIME",&lt;BR /&gt;
"charting.axisLabelsX.minorTickVisibility": "show", &lt;BR /&gt;
"charting.chart.style": "shiny",&lt;BR /&gt;
"charting.chart.bubbleSizeBy": "area",&lt;BR /&gt;
"charting.axisY2.minimumNumber": "0",&lt;BR /&gt;
"charting.axisTitleX.text": "Range",&lt;BR /&gt;
"resizable": true,&lt;BR /&gt;
"charting.axisTitleY2.visibility": "collapsed",&lt;BR /&gt;
"charting.chart.nullValueMode": "gaps",&lt;BR /&gt;
"charting.chart.bubbleMinimumSize": "2",&lt;BR /&gt;
"charting.chart.sliceCollapsingThreshold": "0.001", &lt;BR /&gt;
"charting.axisY2.enabled": "true",&lt;BR /&gt;
"charting.axisTitleX.visibility": "visible",&lt;BR /&gt;
"charting.legend.labelStyle.overflowMode": "ellipsisMiddle",&lt;BR /&gt;
"charting.chart.stackMode": "default",&lt;BR /&gt;
"charting.axisY2.scale": "inherit",&lt;BR /&gt;
"charting.axisLabelsX.majorLabelStyle.overflowMode": "ellipsisNone",&lt;BR /&gt;
"charting.chart.bubbleMaximumSize": "50", &lt;BR /&gt;
"charting.axisY2.maximumNumber": "0", &lt;BR /&gt;
"charting.drilldown": "all",&lt;BR /&gt;
"charting.axisTitleY.text": "$measurement_label$",&lt;BR /&gt;
"charting.axisX.scale": "linear",&lt;BR /&gt;
"charting.data.count": "1000",&lt;BR /&gt;
"charting.axisLabelsX.majorLabelStyle.rotation": "90",&lt;BR /&gt;
"charting.axisTitleY.visibility": "visible",&lt;BR /&gt;
"charting.axisY.scale": "linear", &lt;BR /&gt;
"charting.legend.placement": "right",&lt;/P&gt;

&lt;P&gt;The above code uses HTML syntax.&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 15:24:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246938#M15395</guid>
      <dc:creator>pduflot</dc:creator>
      <dc:date>2020-09-29T15:24:39Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown and hidden column in line chart</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246939#M15396</link>
      <description>&lt;P&gt;Thank you very much for your reply Pduflot&lt;/P&gt;

&lt;P&gt;I see above you say that code above uses HTML syntax.&lt;/P&gt;

&lt;P&gt;I have tried your way in Simple XML (my project is limited there - no Javascript/CSS). And furthermore it is a Column chart.&lt;/P&gt;

&lt;P&gt;I tried to set the same of what you suggested in XML, I added the y2Axis. SCAN_ID is the sole field/column I want to hide in legend (it produces nothing)&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt; &amp;lt;chart&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;`mc_vln` 
| search DB_NAME=$field_db_name$          
| stats 
count(eval(CTRL_FIND_ID=-1)) as Broken,
count(eval(CTRL_FIND_ID=0)) as Correct,
count(eval(CTRL_FIND_ID=1)) as Finding,
earliest(_time) as SCAN_DT_START 
by DB_NAME SCAN_ID
| sort - SCAN_DT_START 
| table DB_NAME SCAN_ID SCAN_DT_START Broken Correct Finding 
| dedup $field_last_x_scan$ DB_NAME 
| head 15
| sort SCAN_DT_START
| fields - SCAN_DT_START
| rename DB_NAME as Database&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;$field1.earliest$&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;$field1.latest$&amp;lt;/latest&amp;gt;
        &amp;lt;/search&amp;gt;

        &amp;lt;option name="charting.chart"&amp;gt;column&amp;lt;/option&amp;gt;

        &amp;lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&amp;gt;-45&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisTitleX.visibility"&amp;gt;collapsed&amp;lt;/option&amp;gt;

        &amp;lt;option name="charting.axisY2.enabled"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisLabelsY2.axisVisibility"&amp;gt;hide&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY2.fields"&amp;gt;"SCAN_ID"&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY2.minimumNumber"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY2.maximumNumber"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisTitleY2.visibility"&amp;gt;collapsed&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.axisY2.scale"&amp;gt;inherit&amp;lt;/option&amp;gt;

        &amp;lt;option name="charting.chart.stackMode"&amp;gt;default&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.legend.labels"&amp;gt;["Finding","Correct","Broken"]&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.legend.placement"&amp;gt;top&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.seriesColors"&amp;gt;[0xFA4343,0x00579F,0x646464]&amp;lt;/option&amp;gt;
        &amp;lt;option name="charting.legend.masterLegend"&amp;gt;&amp;lt;/option&amp;gt;
        &amp;lt;drilldown target="blank"&amp;gt;
          &amp;lt;link&amp;gt;scan_data?form.field_db_name=$click.value$&amp;amp;amp;form.field_scan_id=$row.SCAN_ID$&amp;amp;amp;form.field_ctrl_find_name=$click.name2$&amp;lt;/link&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/chart&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;but I does not work, I still see the SCAN_ID field (the only needed to hide) appear in legend menu&lt;/P&gt;

&lt;P&gt;Is your solution valid for simple XML, or am I missing something in my code?&lt;BR /&gt;
Can you please advise at this point?&lt;/P&gt;

&lt;P&gt;thanks and best regards&lt;BR /&gt;
Altin&lt;/P&gt;</description>
      <pubDate>Tue, 22 Aug 2017 12:07:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-and-hidden-column-in-line-chart/m-p/246939#M15396</guid>
      <dc:creator>altink</dc:creator>
      <dc:date>2017-08-22T12:07:00Z</dc:date>
    </item>
  </channel>
</rss>

