<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Drilldown not working properly. in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338494#M21986</link>
    <description>&lt;P&gt;@NicoloPunzalan24, I have converted to Answers. Please Accept to mark this as answered. Also up vote the comment/s that helped &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
    <pubDate>Mon, 18 Dec 2017 07:15:40 GMT</pubDate>
    <dc:creator>niketn</dc:creator>
    <dc:date>2017-12-18T07:15:40Z</dc:date>
    <item>
      <title>Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338488#M21980</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;

&lt;P&gt;I have a panel containing the top 10 resolution profiles of our tickets and I want to have a drilldown table which when I click the value of the Resolution Profile, there will be a table below which contains the ticket details like ticket number and assignment group.&lt;/P&gt;

&lt;P&gt;My drilldown works fine with the top 1 resolution profile, but when I select other resolution profiles, It gets some other ticket details which is not the one that I clicked in the table. Can you help me please with my query? Please see below query that I have.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;.......| stats count by u_resolution_profiles&amp;lt;/query&amp;gt;
 &amp;lt;/search&amp;gt;

&amp;lt;drilldown&amp;gt;
    &amp;lt;set token="Value_tkn"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
&amp;lt;/drilldown&amp;gt;

&amp;lt;table depends="$Value_tkn$"&amp;gt;
 &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;.......|search $Value_tkn$| table ticket_number u_resolution_profiles assignment_group assigned_to| rename ticket_number as "Ticket Number" u_resolution_profiles as "Resolution Profile" assignment_group as "Assignment Group" assigned_to as "Assigned To"&amp;lt;/query&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Thanks in advance,&lt;BR /&gt;
Nicolo&lt;/P&gt;</description>
      <pubDate>Wed, 13 Dec 2017 07:01:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338488#M21980</guid>
      <dc:creator>NicoloPunzalan2</dc:creator>
      <dc:date>2017-12-13T07:01:17Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338489#M21981</link>
      <description>&lt;P&gt;hey @NicoloPunzalan24&lt;BR /&gt;
in your search query put&lt;/P&gt;

&lt;P&gt;| search "$Value_tkn$"&lt;/P&gt;

&lt;P&gt;"" in query and try again&lt;/P&gt;

&lt;P&gt;let me know if it helps!&lt;/P&gt;</description>
      <pubDate>Wed, 13 Dec 2017 07:09:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338489#M21981</guid>
      <dc:creator>mayurr98</dc:creator>
      <dc:date>2017-12-13T07:09:24Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338490#M21982</link>
      <description>&lt;P&gt;Hi @mayurr98,&lt;/P&gt;

&lt;P&gt;I tried to add them but it still doesn't work. &lt;span class="lia-unicode-emoji" title=":disappointed_face:"&gt;😞&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;Thanks,&lt;BR /&gt;
Nicolo&lt;/P&gt;</description>
      <pubDate>Wed, 13 Dec 2017 07:27:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338490#M21982</guid>
      <dc:creator>NicoloPunzalan2</dc:creator>
      <dc:date>2017-12-13T07:27:05Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338491#M21983</link>
      <description>&lt;P&gt;Have a look at &lt;A href="http://docs.splunk.com/Documentation/SplunkCloud/6.6.3/Viz/tokens#Define_tokens_for_dynamic_drilldown"&gt;Define tokens for dynamic drilldown&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;I suggest the following changes:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;drilldown&amp;gt;
  &amp;lt;condition field="u_resolution_profiles"&amp;gt;
    &amp;lt;set token="Value_tkn"&amp;gt;$click.value2$&amp;lt;/set&amp;gt;
  &amp;lt;/condition&amp;gt;
&amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Also, change your other search to:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;query&amp;gt;....... | search u_resolution_profiles="$Value_tkn$" | .......
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Wed, 13 Dec 2017 08:39:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338491#M21983</guid>
      <dc:creator>Yunagi</dc:creator>
      <dc:date>2017-12-13T08:39:36Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338492#M21984</link>
      <description>&lt;P&gt;try specifying field names in search&lt;BR /&gt;
| search u_resolution_profiles="$Value_tkn$" &lt;/P&gt;

&lt;P&gt;Also when you click on the panel open the drill down in the new search and look what is getting substituted. I am sure you will get an answer if you open the drilldown panel in search.&lt;/P&gt;</description>
      <pubDate>Tue, 29 Sep 2020 17:16:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338492#M21984</guid>
      <dc:creator>mayurr98</dc:creator>
      <dc:date>2020-09-29T17:16:20Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338493#M21985</link>
      <description>&lt;P&gt;Hi @mayurr98,&lt;/P&gt;

&lt;P&gt;Have tried the changes and worked properly. Thanks a lot!&lt;BR /&gt;
Hope you have a good day ahead.&lt;/P&gt;

&lt;P&gt;All the best,&lt;BR /&gt;
Nicolo&lt;/P&gt;</description>
      <pubDate>Mon, 18 Dec 2017 06:23:38 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338493#M21985</guid>
      <dc:creator>NicoloPunzalan2</dc:creator>
      <dc:date>2017-12-18T06:23:38Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working properly.</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338494#M21986</link>
      <description>&lt;P&gt;@NicoloPunzalan24, I have converted to Answers. Please Accept to mark this as answered. Also up vote the comment/s that helped &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 18 Dec 2017 07:15:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-properly/m-p/338494#M21986</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2017-12-18T07:15:40Z</dc:date>
    </item>
  </channel>
</rss>

