<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Need your help to display a field value when mouse hover in any of the statistics table field value in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Need-your-help-to-display-a-field-value-when-mouse-hover-in-any/m-p/491416#M32192</link>
    <description>&lt;P&gt;Hi Team,&lt;/P&gt;

&lt;P&gt;Need your help. We have a data as below. Now we have a field have message. From that EFFDATE,MEMID and MID has been derived. Now customer wants a drilldown. In statistics table if he do a mouse over on any of the fields EFFDATE,MEMID and MID the entire value in "message" field should be listed. It is like a mouseover in Column chart, Attached below. Please help me the logic. CSS/Script/Tokens. Expecting your help on this.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| makeresults count=3
| eval  message="Message"+" "+"14"+" "+"DUPLICATE"+" "+"MID"+"Mid"+":"+"103557"+"'"+"memId"+":"+"98"+"'"+"Eff Date"+":"+"Wed Nov 06 00:00:00 CST 2019"
|rex field="message" "(.*)(?&amp;lt;MID&amp;gt;\d\d\d\d\d\d)(.*)"  
|rex field="message" "(.*)(?&amp;lt;MEMID&amp;gt;\d\d)(.*)"   
|rex field="message" (.*(?&amp;lt;EFFDATE&amp;gt;\D\D\D\s\D\D\D\s\d\d\s\d\d:\d\d:\d\d\s\D\D\D\s\d\d\d\d))
| fields - _time



  EFFDATE                             MEMID          MID           message
    Wed Nov 06 00:00:00 CST 2019           19           103557     Message 14 DUPLICATE MIDMid:103557'memId:98'Eff Date:Wed Nov 06 00:00:00 CST 2019
    Wed Nov 06 00:00:00 CST 2019           19           103557   Message 14 DUPLICATE MIDMid:103557'memId:98'Eff Date:Wed Nov 06][1]
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Tue, 19 Nov 2019 19:40:15 GMT</pubDate>
    <dc:creator>rajaguru27902</dc:creator>
    <dc:date>2019-11-19T19:40:15Z</dc:date>
    <item>
      <title>Need your help to display a field value when mouse hover in any of the statistics table field value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Need-your-help-to-display-a-field-value-when-mouse-hover-in-any/m-p/491416#M32192</link>
      <description>&lt;P&gt;Hi Team,&lt;/P&gt;

&lt;P&gt;Need your help. We have a data as below. Now we have a field have message. From that EFFDATE,MEMID and MID has been derived. Now customer wants a drilldown. In statistics table if he do a mouse over on any of the fields EFFDATE,MEMID and MID the entire value in "message" field should be listed. It is like a mouseover in Column chart, Attached below. Please help me the logic. CSS/Script/Tokens. Expecting your help on this.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| makeresults count=3
| eval  message="Message"+" "+"14"+" "+"DUPLICATE"+" "+"MID"+"Mid"+":"+"103557"+"'"+"memId"+":"+"98"+"'"+"Eff Date"+":"+"Wed Nov 06 00:00:00 CST 2019"
|rex field="message" "(.*)(?&amp;lt;MID&amp;gt;\d\d\d\d\d\d)(.*)"  
|rex field="message" "(.*)(?&amp;lt;MEMID&amp;gt;\d\d)(.*)"   
|rex field="message" (.*(?&amp;lt;EFFDATE&amp;gt;\D\D\D\s\D\D\D\s\d\d\s\d\d:\d\d:\d\d\s\D\D\D\s\d\d\d\d))
| fields - _time



  EFFDATE                             MEMID          MID           message
    Wed Nov 06 00:00:00 CST 2019           19           103557     Message 14 DUPLICATE MIDMid:103557'memId:98'Eff Date:Wed Nov 06 00:00:00 CST 2019
    Wed Nov 06 00:00:00 CST 2019           19           103557   Message 14 DUPLICATE MIDMid:103557'memId:98'Eff Date:Wed Nov 06][1]
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 19 Nov 2019 19:40:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Need-your-help-to-display-a-field-value-when-mouse-hover-in-any/m-p/491416#M32192</guid>
      <dc:creator>rajaguru27902</dc:creator>
      <dc:date>2019-11-19T19:40:15Z</dc:date>
    </item>
    <item>
      <title>Re: Need your help to display a field value when mouse hover in any of the statistics table field value</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Need-your-help-to-display-a-field-value-when-mouse-hover-in-any/m-p/491417#M32193</link>
      <description>&lt;P&gt;Please update on this query&lt;/P&gt;</description>
      <pubDate>Wed, 20 Nov 2019 15:04:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Need-your-help-to-display-a-field-value-when-mouse-hover-in-any/m-p/491417#M32193</guid>
      <dc:creator>rajagurup</dc:creator>
      <dc:date>2019-11-20T15:04:00Z</dc:date>
    </item>
  </channel>
</rss>

