<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Passing 3 values to drilldown in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540908#M37070</link>
    <description>&lt;P&gt;Oops.. Worked Thanks&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 22 Feb 2021 20:39:28 GMT</pubDate>
    <dc:creator>sushmitha_mj</dc:creator>
    <dc:date>2021-02-22T20:39:28Z</dc:date>
    <item>
      <title>Passing 3 values to drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540841#M37064</link>
      <description>&lt;P&gt;I have a table with 5 columns. Currently, I am passing 2 values First value&amp;nbsp; is&amp;nbsp; in the first column(clickvalue) and second field is in the second column(clickvalue2) .&amp;nbsp; So far it is working fine.&amp;nbsp;&lt;/P&gt;&lt;P&gt;When I add another input&amp;nbsp; it does not take the input. It takes the the first column as clickvalue and where ever I click as clickvalue 2, so I an mot able to select the 3 rd input by clicking . I have tried to change the 3 rd input into&amp;nbsp;$row.&amp;lt;fieldname&amp;gt;$ ,&amp;nbsp;clickvalue3, but none of this works.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 22 Feb 2021 14:22:46 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540841#M37064</guid>
      <dc:creator>sushmitha_mj</dc:creator>
      <dc:date>2021-02-22T14:22:46Z</dc:date>
    </item>
    <item>
      <title>Re: Passing 3 values to drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540871#M37067</link>
      <description>&lt;P&gt;Can you share your simple XML because $row.&amp;lt;fieldname&amp;gt;$ does work, so you may be doing something different?&lt;/P&gt;</description>
      <pubDate>Mon, 22 Feb 2021 16:53:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540871#M37067</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-02-22T16:53:48Z</dc:date>
    </item>
    <item>
      <title>Re: Passing 3 values to drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540898#M37068</link>
      <description>&lt;P&gt;Here is the drilldown&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;lt;drilldown&amp;gt;&lt;BR /&gt;&amp;lt;set token="Time_Range"&amp;gt;$click.value$&amp;lt;/set&amp;gt;&lt;BR /&gt;&amp;lt;set token="host_name"&amp;gt;$click.value2$&amp;lt;/set&amp;gt;&lt;BR /&gt;&amp;lt;eval token="e"&amp;gt;relative_time($click.value$,"-48h"&amp;lt;/eval&amp;gt;&lt;BR /&gt;&amp;lt;eval token="l"&amp;gt;$click.value$&amp;lt;/eval&amp;gt;&lt;BR /&gt;&amp;lt;eval token="Start_Time"&amp;gt;strftime($e$,"%Y-%m-%d %H:%M:%S")&amp;lt;/eval&amp;gt;&lt;BR /&gt;&amp;lt;eval token="End_Time"&amp;gt;strftime($l$,"%Y-%m-%d %H:%M:%S")&amp;lt;/eval&amp;gt;&lt;BR /&gt;&amp;lt;eval token="user"&amp;gt;$row.&amp;amp;lt;fieldname&amp;amp;gt;$&amp;lt;/eval&amp;gt;&amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp; &amp;nbsp;&lt;BR /&gt;&amp;lt;/drilldown&amp;gt;&lt;/P&gt;&lt;P&gt;It is working fine without the user token...&amp;nbsp;&amp;lt;eval token="user"&amp;gt;$row.&amp;amp;lt;fieldname&amp;amp;gt;$&amp;lt;/eval&amp;gt;&amp;nbsp; &amp;nbsp;&lt;/P&gt;&lt;P&gt;And when I click... on the parent panel.. only 2 fields are getting selected instead of 3... So I am not sure, how to get 3 parameters passed..&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 22 Feb 2021 18:45:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540898#M37068</guid>
      <dc:creator>sushmitha_mj</dc:creator>
      <dc:date>2021-02-22T18:45:04Z</dc:date>
    </item>
    <item>
      <title>Re: Passing 3 values to drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540900#M37069</link>
      <description>&lt;P&gt;&amp;lt;fieldname&amp;gt; needs to be replaced with the name of your field e.g. $row.field1$&lt;/P&gt;</description>
      <pubDate>Mon, 22 Feb 2021 19:04:24 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540900#M37069</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-02-22T19:04:24Z</dc:date>
    </item>
    <item>
      <title>Re: Passing 3 values to drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540908#M37070</link>
      <description>&lt;P&gt;Oops.. Worked Thanks&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 22 Feb 2021 20:39:28 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Passing-3-values-to-drilldown/m-p/540908#M37070</guid>
      <dc:creator>sushmitha_mj</dc:creator>
      <dc:date>2021-02-22T20:39:28Z</dc:date>
    </item>
  </channel>
</rss>

