<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Time filter issue when executing drilldown on a timechart dashboard in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332934#M21581</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I have a problem to execute a drilldown on a timechart dashboard.&lt;/P&gt;

&lt;P&gt;This is the search for my source dashboard:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source="SDC_GUI_DEN_ER_V" | timechart span=1d count
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I have to click on the date (format date 2017-06-30) and open a new dashboard filtered on this date:&lt;/P&gt;

&lt;P&gt;I have tried in the following way but it isn't working. On source and destination dashboard there is a filter on the time:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;      &amp;lt;link&amp;gt;
        &amp;lt;![CDATA[
        /app/search/eccezioni_giornaliere_dett?earliest=$click.value$&amp;amp;latest=$click.value$
        ]]&amp;gt;
      &amp;lt;/link&amp;gt;
    &amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Please let me know.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Nello&lt;/P&gt;</description>
    <pubDate>Tue, 12 Sep 2017 17:48:41 GMT</pubDate>
    <dc:creator>aniello_cerrato</dc:creator>
    <dc:date>2017-09-12T17:48:41Z</dc:date>
    <item>
      <title>Time filter issue when executing drilldown on a timechart dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332934#M21581</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;I have a problem to execute a drilldown on a timechart dashboard.&lt;/P&gt;

&lt;P&gt;This is the search for my source dashboard:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;source="SDC_GUI_DEN_ER_V" | timechart span=1d count
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I have to click on the date (format date 2017-06-30) and open a new dashboard filtered on this date:&lt;/P&gt;

&lt;P&gt;I have tried in the following way but it isn't working. On source and destination dashboard there is a filter on the time:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;      &amp;lt;link&amp;gt;
        &amp;lt;![CDATA[
        /app/search/eccezioni_giornaliere_dett?earliest=$click.value$&amp;amp;latest=$click.value$
        ]]&amp;gt;
      &amp;lt;/link&amp;gt;
    &amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Please let me know.&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Nello&lt;/P&gt;</description>
      <pubDate>Tue, 12 Sep 2017 17:48:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332934#M21581</guid>
      <dc:creator>aniello_cerrato</dc:creator>
      <dc:date>2017-09-12T17:48:41Z</dc:date>
    </item>
    <item>
      <title>Re: Time filter issue when executing drilldown on a timechart dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332935#M21582</link>
      <description>&lt;P&gt;@aniello_cerrato, if you want to pass on the earliest and latest time stamp for selected span from timechart, can you tried the following?&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;   &amp;lt;link&amp;gt;
     &amp;lt;![CDATA[
     /app/search/eccezioni_giornaliere_dett?earliest=$earliest$&amp;amp;latest=$latest$
     ]]&amp;gt;
   &amp;lt;/link&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Or one without CDATA and &lt;CODE&gt;&amp;amp;&lt;/CODE&gt; escaped as &lt;CODE&gt;&amp;amp;amp;&lt;/CODE&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;    &amp;lt;drilldown&amp;gt;
      &amp;lt;link target="_blank"&amp;gt;/app/search/eccezioni_giornaliere_dett??earliest=$earliest$&amp;amp;amp;latest=$latest$&amp;lt;/link&amp;gt;
    &amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 12 Sep 2017 18:20:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332935#M21582</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-09-12T18:20:46Z</dc:date>
    </item>
    <item>
      <title>Re: Time filter issue when executing drilldown on a timechart dashboard</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332936#M21583</link>
      <description>&lt;P&gt;If the events you are seeking have anything other than the date in their _time field, you really are going to need to do some calculation on that date.   The epoch value of a date is the first moment in that day.  Add 86399, possibly plus .999, to get the last moment in that day. &lt;/P&gt;</description>
      <pubDate>Tue, 12 Sep 2017 23:14:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Time-filter-issue-when-executing-drilldown-on-a-timechart/m-p/332936#M21583</guid>
      <dc:creator>DalJeanis</dc:creator>
      <dc:date>2017-09-12T23:14:36Z</dc:date>
    </item>
  </channel>
</rss>

