topic Re: Does Splunk support fields with whitespace from custom drill-down in Dashboards & Visualizations

Does Splunk support fields with whitespace from custom drill-down

splunkrocks2014 — Tue, 14 Feb 2017 19:51:06 GMT

I have a statistic table with some of the field names contained whitespace, and I created a custom drill-down for each field and pass the parameters to another dashboard when clicked on the field. Here is the sample codes from the statistic table:

...
<option name="count">5</option>
<drilldown>
   <link field="status">
       /app/my_app/details_dashboard?form.http_status=$row.status$
   </link>
</drilldown>

The code showed above only works if the field doesn't contain a whitespace. For the fields with whitespace, I defined as below:

...
<drilldown>
   <link field="Network Location">
      /app/my_app/details_dashboard?form.location=$row.\"Network Location\"$
   </link>
</drilldown>

However, it doesn't work at all. I would like to find out if Splunk supports fields with whitespace from custom drill-down. If any, what is the correct way to handle it? Thanks.

Re: Does Splunk support fields with whitespace from custom drill-down

nravichandran — Tue, 14 Feb 2017 20:06:54 GMT

You can work-around this my using the replace function. | replace "" with "*" |

Re: Does Splunk support fields with whitespace from custom drill-down

splunkrocks2014 — Tue, 14 Feb 2017 20:09:42 GMT

Hi nravichandran, I am not clear what you meant. Could you please explain more? thanks.

Re: Does Splunk support fields with whitespace from custom drill-down

nravichandran — Tue, 14 Feb 2017 20:40:38 GMT

If you know the fields before-hand then you can rename the fields.

Re: Does Splunk support fields with whitespace from custom drill-down

splunkrocks2014 — Tue, 14 Feb 2017 21:18:20 GMT

Well, the end-users request the field names with whitespace ...

Re: Does Splunk support fields with whitespace from custom drill-down

mrgibbon — Wed, 19 Jul 2017 23:49:29 GMT

Try with just $row.Network Location$
I have a similar issue, with needing the passed variable to appear in the new search as "just like this" and not just like this.
If that makes sense.

Re: Does Splunk support fields with whitespace from custom drill-down

duartet — Tue, 10 May 2022 13:34:45 GMT

This works, thanks!