<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Help with single value drilldown into a new tab in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331439#M21486</link>
    <description>&lt;P&gt;Following is a run anywhere dashboard with drilldown which should try to open the dashboard with one earliest and latest time stamp and clicked count as three parameters. Based on your example URL, seems like you do not need any parameters. Get rid of Simple XML Single Value configurations which are deprecated like &lt;CODE&gt;underLabel"&lt;/CODE&gt;(used twice in your example), &lt;CODE&gt;linkFields&lt;/CODE&gt; and &lt;CODE&gt;linkView&lt;/CODE&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;Single Value Drilldown&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;single&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index=_internal sourcetype=splunkd log_level="ERROR"
| timechart count&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="colorBy"&amp;gt;value&amp;lt;/option&amp;gt;
        &amp;lt;option name="colorMode"&amp;gt;block&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="numberPrecision"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="rangeColors"&amp;gt;["0x65a637","0xf7bc38","0xd93f3c"]&amp;lt;/option&amp;gt;
        &amp;lt;option name="rangeValues"&amp;gt;[100,200]&amp;lt;/option&amp;gt;
        &amp;lt;option name="showSparkline"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="showTrendIndicator"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="trellis.enabled"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="trellis.scales.shared"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="trellis.size"&amp;gt;medium&amp;lt;/option&amp;gt;
        &amp;lt;option name="trendColorInterpretation"&amp;gt;standard&amp;lt;/option&amp;gt;
        &amp;lt;option name="trendDisplayMode"&amp;gt;absolute&amp;lt;/option&amp;gt;
        &amp;lt;option name="trendInterval"&amp;gt;-30m&amp;lt;/option&amp;gt;
        &amp;lt;option name="unitPosition"&amp;gt;after&amp;lt;/option&amp;gt;
        &amp;lt;option name="useColors"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="useThousandSeparators"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;link target="_blank"&amp;gt;/app/search/orphaned_scheduled_searches?log_level=$row.count$&amp;amp;amp;earliest=$earliest$&amp;amp;amp;latest=$latest$&amp;lt;/link&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/single&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Tue, 12 Sep 2017 18:50:56 GMT</pubDate>
    <dc:creator>niketn</dc:creator>
    <dc:date>2017-09-12T18:50:56Z</dc:date>
    <item>
      <title>Help with single value drilldown into a new tab</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331434#M21481</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;

&lt;P&gt;I am trying to create a drilldown for a single value, on clicking it,a new dashboard should open in a new tab.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;      `&amp;lt;option name="colorBy"&amp;gt;value&amp;lt;/option&amp;gt;
    &amp;lt;option name="colorMode"&amp;gt;block&amp;lt;/option&amp;gt;
    &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
    &amp;lt;option name="numberPrecision"&amp;gt;0&amp;lt;/option&amp;gt;
    &amp;lt;option name="rangeColors"&amp;gt;["0x65a637","0xf7bc38","0xd93f3c"]&amp;lt;/option&amp;gt;
    &amp;lt;option name="rangeValues"&amp;gt;[100,200]&amp;lt;/option&amp;gt;
    &amp;lt;option name="showSparkline"&amp;gt;1&amp;lt;/option&amp;gt;
    &amp;lt;option name="showTrendIndicator"&amp;gt;1&amp;lt;/option&amp;gt;
    &amp;lt;option name="trendColorInterpretation"&amp;gt;standard&amp;lt;/option&amp;gt;
    &amp;lt;option name="trendDisplayMode"&amp;gt;absolute&amp;lt;/option&amp;gt;
    &amp;lt;option name="trendInterval"&amp;gt;-30m&amp;lt;/option&amp;gt;
    &amp;lt;option name="underLabel"&amp;gt;compared to $timepickr.earliest$ before&amp;lt;/option&amp;gt;
    &amp;lt;option name="unitPosition"&amp;gt;after&amp;lt;/option&amp;gt;
    &amp;lt;option name="useColors"&amp;gt;1&amp;lt;/option&amp;gt;
    &amp;lt;option name="useThousandSeparators"&amp;gt;1&amp;lt;/option&amp;gt;
    &amp;lt;option name="underLabel"&amp;gt;compared to $timepickr.earliest$ before&amp;lt;/option&amp;gt;

   &amp;lt;option name="linkFields"&amp;gt;underlabel&amp;lt;/option&amp;gt;
    &amp;lt;option name="linkView"&amp;gt;404_error_srv&amp;lt;/option&amp;gt;
   &amp;lt;/single&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;`&lt;BR /&gt;
This XML  is working but not going opening a new tab and I am using splunk 6.6, which says the underlabel and link fields are depricated.How can I get into another tab on clicking the single value number&lt;/P&gt;</description>
      <pubDate>Tue, 12 Sep 2017 16:52:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331434#M21481</guid>
      <dc:creator>vrmandadi</dc:creator>
      <dc:date>2017-09-12T16:52:08Z</dc:date>
    </item>
    <item>
      <title>Re: Help with single value drilldown into a new tab</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331435#M21482</link>
      <description>&lt;P&gt;Hi  vrmandadi,&lt;BR /&gt;
using Splunk 6.6.x there is the possibility to use ui to define drilldown and choice to open a new tab or the same.&lt;BR /&gt;
Anyway, the parameter to set new windows is&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;drilldown&amp;gt;
     &amp;lt;link target="_blank"&amp;gt;/app/myapp/mwdashboard&amp;lt;/link&amp;gt;
&amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 12 Sep 2017 17:09:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331435#M21482</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2017-09-12T17:09:04Z</dc:date>
    </item>
    <item>
      <title>Re: Help with single value drilldown into a new tab</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331436#M21483</link>
      <description>&lt;P&gt;Hello @cusello&lt;/P&gt;

&lt;P&gt;I tried using t he parameter ,but no luck with it.It is not even opening the search on clicking nor to a new window&lt;/P&gt;</description>
      <pubDate>Tue, 12 Sep 2017 17:34:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331436#M21483</guid>
      <dc:creator>vrmandadi</dc:creator>
      <dc:date>2017-09-12T17:34:40Z</dc:date>
    </item>
    <item>
      <title>Re: Help with single value drilldown into a new tab</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331437#M21484</link>
      <description>&lt;P&gt;I used on a test dashboard and runs!&lt;BR /&gt;
could you share your drilldown option?&lt;BR /&gt;
Bye.&lt;BR /&gt;
Giuseppe&lt;/P&gt;</description>
      <pubDate>Tue, 12 Sep 2017 17:47:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331437#M21484</guid>
      <dc:creator>gcusello</dc:creator>
      <dc:date>2017-09-12T17:47:05Z</dc:date>
    </item>
    <item>
      <title>Re: Help with single value drilldown into a new tab</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331438#M21485</link>
      <description>&lt;PRE&gt;&lt;CODE&gt;&amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
&amp;lt;drilldown&amp;gt;
      &amp;lt;link target="_blank"&amp;gt;/app/vams/404_error_cli&amp;lt;/link&amp;gt;
 &amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 12 Sep 2017 17:52:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331438#M21485</guid>
      <dc:creator>vrmandadi</dc:creator>
      <dc:date>2017-09-12T17:52:12Z</dc:date>
    </item>
    <item>
      <title>Re: Help with single value drilldown into a new tab</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331439#M21486</link>
      <description>&lt;P&gt;Following is a run anywhere dashboard with drilldown which should try to open the dashboard with one earliest and latest time stamp and clicked count as three parameters. Based on your example URL, seems like you do not need any parameters. Get rid of Simple XML Single Value configurations which are deprecated like &lt;CODE&gt;underLabel"&lt;/CODE&gt;(used twice in your example), &lt;CODE&gt;linkFields&lt;/CODE&gt; and &lt;CODE&gt;linkView&lt;/CODE&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;Single Value Drilldown&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;single&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;index=_internal sourcetype=splunkd log_level="ERROR"
| timechart count&amp;lt;/query&amp;gt;
          &amp;lt;earliest&amp;gt;-24h@h&amp;lt;/earliest&amp;gt;
          &amp;lt;latest&amp;gt;now&amp;lt;/latest&amp;gt;
          &amp;lt;sampleRatio&amp;gt;1&amp;lt;/sampleRatio&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="colorBy"&amp;gt;value&amp;lt;/option&amp;gt;
        &amp;lt;option name="colorMode"&amp;gt;block&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
        &amp;lt;option name="numberPrecision"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="rangeColors"&amp;gt;["0x65a637","0xf7bc38","0xd93f3c"]&amp;lt;/option&amp;gt;
        &amp;lt;option name="rangeValues"&amp;gt;[100,200]&amp;lt;/option&amp;gt;
        &amp;lt;option name="showSparkline"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="showTrendIndicator"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="trellis.enabled"&amp;gt;0&amp;lt;/option&amp;gt;
        &amp;lt;option name="trellis.scales.shared"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="trellis.size"&amp;gt;medium&amp;lt;/option&amp;gt;
        &amp;lt;option name="trendColorInterpretation"&amp;gt;standard&amp;lt;/option&amp;gt;
        &amp;lt;option name="trendDisplayMode"&amp;gt;absolute&amp;lt;/option&amp;gt;
        &amp;lt;option name="trendInterval"&amp;gt;-30m&amp;lt;/option&amp;gt;
        &amp;lt;option name="unitPosition"&amp;gt;after&amp;lt;/option&amp;gt;
        &amp;lt;option name="useColors"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;option name="useThousandSeparators"&amp;gt;1&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;link target="_blank"&amp;gt;/app/search/orphaned_scheduled_searches?log_level=$row.count$&amp;amp;amp;earliest=$earliest$&amp;amp;amp;latest=$latest$&amp;lt;/link&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/single&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 12 Sep 2017 18:50:56 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Help-with-single-value-drilldown-into-a-new-tab/m-p/331439#M21486</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-09-12T18:50:56Z</dc:date>
    </item>
  </channel>
</rss>

