<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: drilldown for singlevalue in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54151#M2820</link>
    <description>&lt;P&gt;If you think about it a little differently, it's pretty easy to do with Sideview Utils.  Here's an example. &lt;/P&gt;

&lt;P&gt;I basically render out the first number,  and then I put it next to a Button module.  You can use custom CSS to float my HTML module and the button module side by side.   I haven't done that here though. &lt;/P&gt;

&lt;P&gt;Then when the user clicks on the Button,   the other two pieces of information show in the second HTML module. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;module name="Search" layoutPanel="panel_row2_col1" autoRun="True"&amp;gt;
  &amp;lt;param name="search"&amp;gt;index=_internal source=*metrics.log group="per_sourcetype_thruput" OR group="per_index_thruput" | stats count by series, group&amp;lt;/param&amp;gt;
  &amp;lt;param name="earliest"&amp;gt;-1h&amp;lt;/param&amp;gt;

  &amp;lt;module name="HTML"&amp;gt;
    &amp;lt;param name="html"&amp;gt;&amp;lt;![CDATA[
    &amp;lt;h3&amp;gt;$results.count$ indexes and sourcetypes&amp;lt;/h3&amp;gt;
    ]]&amp;gt;&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;

  &amp;lt;module name="Button"&amp;gt;
    &amp;lt;param name="allowAutoSubmit"&amp;gt;False&amp;lt;/param&amp;gt;
    &amp;lt;param name="label"&amp;gt;see breakdown&amp;lt;/param&amp;gt;

    &amp;lt;module name="PostProcess"&amp;gt;
      &amp;lt;param name="search"&amp;gt;eval foo=1 | chart count over foo by group | fields - foo&amp;lt;/param&amp;gt;

      &amp;lt;module name="HTML"&amp;gt;
        &amp;lt;param name="html"&amp;gt;&amp;lt;![CDATA[
        Sourcetypes: &amp;lt;b&amp;gt;$results[0].per_sourcetype_thruput$&amp;lt;/b&amp;gt;&amp;lt;br&amp;gt;
        Indexes: &amp;lt;b&amp;gt;$results[0].per_index_thruput$&amp;lt;/b&amp;gt;&amp;lt;br&amp;gt;
        ]]&amp;gt;&amp;lt;/param&amp;gt;
      &amp;lt;/module&amp;gt;
    &amp;lt;/module&amp;gt;
  &amp;lt;/module&amp;gt;
&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;One problem is that the HTML module below the button displays the empty content before the button is clicked...    &lt;/P&gt;

&lt;P&gt;Moreover though, this use case is just a little odd and maybe I'm missing something.  Why not just display both numbers at once, or display all three numbers? &lt;/P&gt;</description>
    <pubDate>Tue, 22 May 2012 18:56:28 GMT</pubDate>
    <dc:creator>sideview</dc:creator>
    <dc:date>2012-05-22T18:56:28Z</dc:date>
    <item>
      <title>drilldown for singlevalue</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54148#M2817</link>
      <description>&lt;P&gt;Hi All&lt;/P&gt;

&lt;P&gt;Can we Drilldown the singlevalue chart in to three other singlevalue charts.i.e by the click on the one singlevalue it should further drill down to three other drilldown singlevalue charts.&lt;BR /&gt;
please help me on this&lt;/P&gt;

&lt;P&gt;Thanks. &lt;/P&gt;</description>
      <pubDate>Thu, 17 May 2012 09:32:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54148#M2817</guid>
      <dc:creator>rakesh_498115</dc:creator>
      <dc:date>2012-05-17T09:32:19Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown for singlevalue</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54149#M2818</link>
      <description>&lt;P&gt;Unfortunately, SingleValue is only wired to drill down into different views, not provide drilldown parameters for other modules.  Is this something that would be useful enough for you that we should consider it for a future enhancement?  If so, can you provide some more detail about your use case?&lt;/P&gt;</description>
      <pubDate>Thu, 17 May 2012 20:56:26 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54149#M2818</guid>
      <dc:creator>araitz</dc:creator>
      <dc:date>2012-05-17T20:56:26Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown for singlevalue</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54150#M2819</link>
      <description>&lt;P&gt;yeah..Sure..I actually need to display a singlevalue chart that contains the total count of the requests and responses from the logs , and then when i click on this singlevalue it has to be further drilldowned to two other singlevalue boxes which contains requests count and responses count separately.for Example If the above singlevalue BOX1 contains value 100 (both requests and responses count) , when i click on this i need to get BOX2 containing a value 60 ( requests count alone ) and BOX3 containing value 40 (responses count alone ).I Hope given the required information.&lt;/P&gt;</description>
      <pubDate>Sun, 20 May 2012 07:04:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54150#M2819</guid>
      <dc:creator>rakesh_498115</dc:creator>
      <dc:date>2012-05-20T07:04:53Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown for singlevalue</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54151#M2820</link>
      <description>&lt;P&gt;If you think about it a little differently, it's pretty easy to do with Sideview Utils.  Here's an example. &lt;/P&gt;

&lt;P&gt;I basically render out the first number,  and then I put it next to a Button module.  You can use custom CSS to float my HTML module and the button module side by side.   I haven't done that here though. &lt;/P&gt;

&lt;P&gt;Then when the user clicks on the Button,   the other two pieces of information show in the second HTML module. &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;module name="Search" layoutPanel="panel_row2_col1" autoRun="True"&amp;gt;
  &amp;lt;param name="search"&amp;gt;index=_internal source=*metrics.log group="per_sourcetype_thruput" OR group="per_index_thruput" | stats count by series, group&amp;lt;/param&amp;gt;
  &amp;lt;param name="earliest"&amp;gt;-1h&amp;lt;/param&amp;gt;

  &amp;lt;module name="HTML"&amp;gt;
    &amp;lt;param name="html"&amp;gt;&amp;lt;![CDATA[
    &amp;lt;h3&amp;gt;$results.count$ indexes and sourcetypes&amp;lt;/h3&amp;gt;
    ]]&amp;gt;&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;

  &amp;lt;module name="Button"&amp;gt;
    &amp;lt;param name="allowAutoSubmit"&amp;gt;False&amp;lt;/param&amp;gt;
    &amp;lt;param name="label"&amp;gt;see breakdown&amp;lt;/param&amp;gt;

    &amp;lt;module name="PostProcess"&amp;gt;
      &amp;lt;param name="search"&amp;gt;eval foo=1 | chart count over foo by group | fields - foo&amp;lt;/param&amp;gt;

      &amp;lt;module name="HTML"&amp;gt;
        &amp;lt;param name="html"&amp;gt;&amp;lt;![CDATA[
        Sourcetypes: &amp;lt;b&amp;gt;$results[0].per_sourcetype_thruput$&amp;lt;/b&amp;gt;&amp;lt;br&amp;gt;
        Indexes: &amp;lt;b&amp;gt;$results[0].per_index_thruput$&amp;lt;/b&amp;gt;&amp;lt;br&amp;gt;
        ]]&amp;gt;&amp;lt;/param&amp;gt;
      &amp;lt;/module&amp;gt;
    &amp;lt;/module&amp;gt;
  &amp;lt;/module&amp;gt;
&amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;One problem is that the HTML module below the button displays the empty content before the button is clicked...    &lt;/P&gt;

&lt;P&gt;Moreover though, this use case is just a little odd and maybe I'm missing something.  Why not just display both numbers at once, or display all three numbers? &lt;/P&gt;</description>
      <pubDate>Tue, 22 May 2012 18:56:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54151#M2820</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2012-05-22T18:56:28Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown for singlevalue</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54152#M2821</link>
      <description>&lt;P&gt;They're making a tiered dashboard. Components A, B, and C. Each component has subcomponents 1, 2, and 3 that they want show response times of. So, they show A, B, and C in row 1, then depending on what you click, A1/A2/A3, B1/B2/B3, or C1/C2/C3 should show in row 2. They don't want to show all values for all combinations because it is too much for the user to take in.&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2013 10:14:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54152#M2821</guid>
      <dc:creator>Jason</dc:creator>
      <dc:date>2013-03-08T10:14:21Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown for singlevalue</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54153#M2822</link>
      <description>&lt;P&gt;OK.  Well the approach above would show only the first number until the button was clicked.   even easier would be to show the first number in a one-row Table, and then supply all the other information with HTML modules below the Table, when the row was clicked by the user.&lt;/P&gt;</description>
      <pubDate>Fri, 08 Mar 2013 18:18:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown-for-singlevalue/m-p/54153#M2822</guid>
      <dc:creator>sideview</dc:creator>
      <dc:date>2013-03-08T18:18:21Z</dc:date>
    </item>
  </channel>
</rss>

