<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Drilldown not working correctly in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482507#M34066</link>
    <description>&lt;P&gt;Option 1 works perfectly for me, thanks..&lt;BR /&gt;
never knew i could use a "AND" inside the condition eval. There is so much to know in SPL...&lt;/P&gt;</description>
    <pubDate>Tue, 25 Feb 2020 17:41:21 GMT</pubDate>
    <dc:creator>jiaqya</dc:creator>
    <dc:date>2020-02-25T17:41:21Z</dc:date>
    <item>
      <title>Drilldown not working correctly</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482502#M34061</link>
      <description>&lt;P&gt;i have a drilldown setup to open 2 different pages on 2 different clicks on the page.&lt;BR /&gt;
but what i see is , whatever the click i do on the page , it only opens the first link, ie test1.&lt;BR /&gt;
any body know what the issue is here.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;      &amp;lt;condition match="match('click.name2', &amp;amp;quot;Today&amp;amp;quot;)"&amp;gt;
        &amp;lt;eval token="test1"&amp;gt;mvindex(split('click.value', "Test1"),0)&amp;lt;/eval&amp;gt;
        &amp;lt;link&amp;gt;
          &amp;lt;![CDATA[/app/test1/test1?form.Name=$test1]]&amp;gt;
        &amp;lt;/link&amp;gt;
      &amp;lt;/condition&amp;gt;
      &amp;lt;condition match="match('click.name2', &amp;amp;quot;Today&amp;amp;quot;)"&amp;gt;
        &amp;lt;eval token="test2"&amp;gt;mvindex(split('click.value', "Test2"),0)&amp;lt;/eval&amp;gt;
        &amp;lt;link&amp;gt;
          &amp;lt;![CDATA[/app/test2/test?form.Name=$test2$]]&amp;gt;
        &amp;lt;/link&amp;gt;
      &amp;lt;/condition&amp;gt;
      &amp;lt;condition&amp;gt;&amp;lt;/condition&amp;gt;
    &amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 25 Feb 2020 03:09:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482502#M34061</guid>
      <dc:creator>jiaqya</dc:creator>
      <dc:date>2020-02-25T03:09:12Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working correctly</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482503#M34062</link>
      <description>&lt;P&gt;You can only add one link drill-down to a column. When user clicks a value you can display two links and ask them click to go to those links, check if this works for you.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;panel&amp;gt;
     ....
       &amp;lt;table&amp;gt;
        ....
        &amp;lt;drilldown&amp;gt;
          &amp;lt;condition match="match('click.name2', &amp;amp;quot; Today&amp;amp;quot;)"&amp;gt;
            &amp;lt;eval token="test1"&amp;gt;mvindex(split('click.value', "Test1"),0)&amp;lt;/eval&amp;gt;
            &amp;lt;eval token="test2"&amp;gt;mvindex(split('click.value', "Test2"),0)&amp;lt;/eval&amp;gt;
          &amp;lt;/condition&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/table&amp;gt;
      &amp;lt;html depends="$test1$"&amp;gt;
          &amp;lt;h3&amp;gt;Click below to go to forms:&amp;lt;/h3&amp;gt;
            &amp;lt;a href="/app/test1/test1?form.Name=$test1$" target="_blank"&amp;gt;Test1&amp;lt;/a&amp;gt;
            &amp;lt;br/&amp;gt;
            &amp;lt;a href="/app/test2/test?form.Name=$test2$" target="_blank"&amp;gt;Test2&amp;lt;/a&amp;gt;
      &amp;lt;/html&amp;gt;
&amp;lt;/panel&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Tue, 25 Feb 2020 04:39:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482503#M34062</guid>
      <dc:creator>manjunathmeti</dc:creator>
      <dc:date>2020-02-25T04:39:49Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working correctly</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482504#M34063</link>
      <description>&lt;P&gt;@jiaqya &lt;/P&gt;

&lt;P&gt;The behaviour of &lt;CODE&gt;condition&lt;/CODE&gt; tag is if the first condition matches then it will execute that block and skip others. &lt;/P&gt;

&lt;P&gt;In your shared sample code, both the condition are same and might be possible your every click is matchig with first condition.&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;&amp;lt;condition match="match('click.name2', &amp;amp;quot;Today&amp;amp;quot;)"&amp;gt;&lt;/CODE&gt;&lt;BR /&gt;
.&lt;BR /&gt;
.&lt;BR /&gt;
.&lt;BR /&gt;
&lt;CODE&gt;&amp;lt;condition match="match('click.name2', &amp;amp;quot;Today&amp;amp;quot;)"&amp;gt;&lt;/CODE&gt; &lt;/P&gt;</description>
      <pubDate>Tue, 25 Feb 2020 05:16:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482504#M34063</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2020-02-25T05:16:51Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working correctly</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482505#M34064</link>
      <description>&lt;P&gt;That exactly seems to be the problem, i have correct it by adjusting columns.&lt;BR /&gt;
Now i have a row , but i want to only drilldown on the "Today" column.&lt;BR /&gt;
currently the full row is drilldownable..&lt;/P&gt;

&lt;P&gt;column names are dynamic, ex: jan2020 feb2020  Today..... except Today.&lt;BR /&gt;
so how do i exclude the other columns dynamically. can i use a wild card for column names ?&lt;/P&gt;</description>
      <pubDate>Tue, 25 Feb 2020 05:42:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482505#M34064</guid>
      <dc:creator>jiaqya</dc:creator>
      <dc:date>2020-02-25T05:42:34Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working correctly</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482506#M34065</link>
      <description>&lt;P&gt;@jiaqya &lt;/P&gt;

&lt;P&gt;I'm sharing 2 dashboards XML  with you. &lt;/P&gt;

&lt;P&gt;&lt;STRONG&gt;1) This dashboard is an example of on the base of the column name and value. It will open respective link also.&lt;/STRONG&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;Today&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| makeresults count=2 | eval a=1 | accum a | eval OtherColumns=if(a==1,"Data Test1 Event?","Data Test2 Event?"), Today="Hello" | table OtherColumns Today&amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;20&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;cell&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;condition match="match('click.name2',&amp;amp;quot;Today&amp;amp;quot;) AND match('click.value', &amp;amp;quot;Test1&amp;amp;quot;)"&amp;gt;
             &amp;lt;eval token="test1"&amp;gt;mvindex(split('click.value', "Test1"),0)&amp;lt;/eval&amp;gt;
            &amp;lt;link target="_blank"&amp;gt;/app/test1/test1?form.Name=$test1$&amp;lt;/link&amp;gt;
          &amp;lt;/condition&amp;gt;
          &amp;lt;condition match="match('click.name2',&amp;amp;quot;Today&amp;amp;quot;) AND match('click.value', &amp;amp;quot;Test2&amp;amp;quot;)"&amp;gt;
            &amp;lt;eval token="test2"&amp;gt;mvindex(split('click.value', "Test2"),0)&amp;lt;/eval&amp;gt;
            &amp;lt;link target="_blank"&amp;gt;/app/test2/test?form.Name=$test2$&amp;lt;/link&amp;gt;
          &amp;lt;/condition&amp;gt;
          &amp;lt;condition&amp;gt;
            &amp;lt;!-- Keep It Blank --&amp;gt;

          &amp;lt;/condition&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;html&amp;gt;
        test1 = $test1$ &amp;lt;br/&amp;gt;
        test2 = $test2$ &amp;lt;br/&amp;gt;
      &amp;lt;/html&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;STRONG&gt;2) This dashboard is an example of open multiple link.&lt;/STRONG&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
  &amp;lt;label&amp;gt;Today&amp;lt;/label&amp;gt;
  &amp;lt;row&amp;gt;
    &amp;lt;panel&amp;gt;
      &amp;lt;table&amp;gt;
        &amp;lt;search&amp;gt;
          &amp;lt;query&amp;gt;| makeresults count=2 | eval OtherColumns="Hi", Today="Hello" | table OtherColumns Today&amp;lt;/query&amp;gt;
        &amp;lt;/search&amp;gt;
        &amp;lt;option name="count"&amp;gt;20&amp;lt;/option&amp;gt;
        &amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;option name="drilldown"&amp;gt;cell&amp;lt;/option&amp;gt;
        &amp;lt;option name="percentagesRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
        &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="totalsRow"&amp;gt;false&amp;lt;/option&amp;gt;
        &amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;condition field="Today"&amp;gt;
            &amp;lt;link target="_blank"&amp;gt;https://www.google.com&amp;lt;/link&amp;gt;
            &amp;lt;link target="_blank"&amp;gt;https://www.yahoo.com&amp;lt;/link&amp;gt;
          &amp;lt;/condition&amp;gt;
          &amp;lt;condition&amp;gt;
          &amp;lt;/condition&amp;gt;
        &amp;lt;/drilldown&amp;gt;
      &amp;lt;/table&amp;gt;
    &amp;lt;/panel&amp;gt;
  &amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;I suggest you to go with 1st option but take refernce as per your requirement.&lt;/P&gt;</description>
      <pubDate>Tue, 25 Feb 2020 06:17:10 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482506#M34065</guid>
      <dc:creator>kamlesh_vaghela</dc:creator>
      <dc:date>2020-02-25T06:17:10Z</dc:date>
    </item>
    <item>
      <title>Re: Drilldown not working correctly</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482507#M34066</link>
      <description>&lt;P&gt;Option 1 works perfectly for me, thanks..&lt;BR /&gt;
never knew i could use a "AND" inside the condition eval. There is so much to know in SPL...&lt;/P&gt;</description>
      <pubDate>Tue, 25 Feb 2020 17:41:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Drilldown-not-working-correctly/m-p/482507#M34066</guid>
      <dc:creator>jiaqya</dc:creator>
      <dc:date>2020-02-25T17:41:21Z</dc:date>
    </item>
  </channel>
</rss>

