<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Display data from two rows when using drilldown in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/545699#M37478</link>
    <description>&lt;P&gt;Duplicate - it looks like the community is having problems - replies don't appear to be being accepted, but they are there when a refresh is done so it might be true when posting a new topic&lt;/P&gt;</description>
    <pubDate>Sat, 27 Mar 2021 13:11:06 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2021-03-27T13:11:06Z</dc:date>
    <item>
      <title>Display data from two rows when using drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/545686#M37476</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have a table with 5 rows as shown below.&lt;/P&gt;&lt;PRE&gt;Report      Count     Comments
Report 1    22         abc
Report 2    786        def
Report 3    10,037     ghi
Report 4    719&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;jkl&lt;/PRE&gt;&lt;P&gt;When I click on any row, it displays data for that row using the&amp;nbsp;&amp;lt;option name="drilldown"&amp;gt;row&amp;lt;/option&amp;gt; in my template like this :&lt;/P&gt;&lt;P&gt;Hi Team,&amp;nbsp;&lt;BR /&gt;According to our Splunk logs below are the top reports having high count:&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Report: Report1&lt;BR /&gt;Comment: abc&lt;BR /&gt;Count: 22&lt;/P&gt;&lt;P&gt;If you have any questions please feel free to contact us.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards&amp;nbsp;&lt;/P&gt;&lt;P&gt;Support Team&lt;/P&gt;&lt;P&gt;&amp;nbsp;---------END of my display message----------&lt;/P&gt;&lt;P&gt;Now when I click 2nd row(after clicking the first row) I want 2nd-row data also to be displayed along with the above results so that the output looks like this:&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hi Team,&amp;nbsp;&lt;BR /&gt;According to our Splunk logs below are the top reports having high count:&amp;nbsp;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Report: Report1&lt;BR /&gt;Comment: abc&lt;BR /&gt;Count: 22&lt;/P&gt;&lt;P&gt;Report: Report2&lt;BR /&gt;Comment: def&lt;BR /&gt;Count: 786&lt;/P&gt;&lt;P&gt;If you have any questions please feel free to contact us.&amp;nbsp;&lt;/P&gt;&lt;P&gt;Regards&amp;nbsp;&lt;/P&gt;&lt;P&gt;Support Team&lt;/P&gt;&lt;P&gt;&amp;nbsp;---------END of my display message----------&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;This is the code I have used :&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;&amp;lt;row&amp;gt; 
&amp;lt;panel&amp;gt; 
&amp;lt;table&amp;gt; 
&amp;lt;title&amp;gt;click a row for more details&amp;lt;/title&amp;gt; 
&amp;lt;search base="main_search"&amp;gt; &amp;lt;query&amp;gt;| table reportName count comments&amp;lt;/query&amp;gt; 
&amp;lt;/search&amp;gt; 
&amp;lt;option name="count"&amp;gt;10&amp;lt;/option&amp;gt; 
&amp;lt;option name="dataOverlayMode"&amp;gt;none&amp;lt;/option&amp;gt; 
&amp;lt;option name="drilldown"&amp;gt;row&amp;lt;/option&amp;gt; 
&amp;lt;option name="refresh.display"&amp;gt;progressbar&amp;lt;/option&amp;gt;
 &amp;lt;option name="rowNumbers"&amp;gt;false&amp;lt;/option&amp;gt; 
&amp;lt;option name="wrap"&amp;gt;true&amp;lt;/option&amp;gt; 
&amp;lt;fields&amp;gt;$table_fields$&amp;lt;/fields&amp;gt; 
&amp;lt;drilldown&amp;gt; 
&amp;lt;eval token="customer_comment_en"&amp;gt; 
" Report: ".$ReportId$." 
Count: ".$count$." 
Comments: ".$comment$." 
" 
&amp;lt;/eval&amp;gt; 
&amp;lt;set token="drilldown_display"&amp;gt;block&amp;lt;/set&amp;gt; 
&amp;lt;/drilldown&amp;gt; 
&amp;lt;/table&amp;gt; 
&amp;lt;/panel&amp;gt; 
&amp;lt;/row&amp;gt; 
&amp;lt;row depends="$drilldown_display$"&amp;gt; 
&amp;lt;panel&amp;gt; &amp;lt;html&amp;gt; &amp;lt;h1 class="SectionHeader"&amp;gt;Customer Communication&amp;lt;/h1&amp;gt; &amp;lt;div style="float:left; width:calc(95% - 50px);" class="pageInfo"&amp;gt; 
&amp;lt;pre&amp;gt; 
Hi Team, According to our splunk logs below are the top reports having high count: 
$customer_comment_en$ 

If you have any questions please feel free to contact us. 
Regards Support Team 
&amp;lt;/pre&amp;gt; 
&amp;lt;/div&amp;gt; 
&amp;lt;/html&amp;gt; 
&amp;lt;/panel&amp;gt; 
&amp;lt;panel&amp;gt; &lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Basically, I want to access data for not just one row, but multiple rows when I click on them and display&lt;/P&gt;&lt;P&gt;Can anyone help?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 27 Mar 2021 12:00:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/545686#M37476</guid>
      <dc:creator>Splunk_noobie</dc:creator>
      <dc:date>2021-03-27T12:00:31Z</dc:date>
    </item>
    <item>
      <title>Re: Display data from two rows when using drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/545699#M37478</link>
      <description>&lt;P&gt;Duplicate - it looks like the community is having problems - replies don't appear to be being accepted, but they are there when a refresh is done so it might be true when posting a new topic&lt;/P&gt;</description>
      <pubDate>Sat, 27 Mar 2021 13:11:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/545699#M37478</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-03-27T13:11:06Z</dc:date>
    </item>
    <item>
      <title>Re: Display data from two rows when using drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/546103#M37513</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168"&gt;@ITWhisperer&lt;/a&gt;&amp;nbsp;Could you please suggest what to do here?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 31 Mar 2021 00:34:03 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/546103#M37513</guid>
      <dc:creator>Splunk_noobie</dc:creator>
      <dc:date>2021-03-31T00:34:03Z</dc:date>
    </item>
    <item>
      <title>Re: Display data from two rows when using drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/546146#M37515</link>
      <description>&lt;P&gt;Follow the&amp;nbsp;&lt;A href="https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/545688#M37477" target="_self"&gt;original post&lt;/A&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 31 Mar 2021 07:24:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Display-data-from-two-rows-when-using-drilldown/m-p/546146#M37515</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2021-03-31T07:24:06Z</dc:date>
    </item>
  </channel>
</rss>

