interlinked Dashboard

Tannawi_Chauha1 — Wed, 10 Aug 2016 15:29:31 GMT

created a dashboard showing status of server. created another dashboard which show status of all the application running under that server.
requirement: when the server status goes down, i have to click on it and it will take me to another dashboard which will show me which application is down due to which server is down.

Thanks in advance

Re: interlinked Dashboard

jkat54 — Wed, 10 Aug 2016 17:23:09 GMT

Check this out:

https://conf.splunk.com/session/2013/Using_Splunk_LisaGuinn_HowToUseDynamicDrilldown.pdf

Also this:

http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Understandbasictableandchartdrilldownactions

It's going to look a bit like this:

MAIN DASHBOARD:

<dashboard>
  <label>Dynamic Drilldown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index=indexName ERROR | chart count by host </query>
          <earliest>-7d@h</earliest>
          <latest>now</latest>
        </search>
        <drilldown>
          <link target="_blank">
            /apps/MyApp/drilldown_target_dashboard_name?host=$row.host$
          </link>
        </drilldown>
        <option name="drilldown">row</option>
      </table>
    </panel>
  </row>
</dashboard>

DRILLED INTO DASHBOARD:

<dashboard>
  <row>
    <panel>
      <chart>
        <title>Host Application Error Details/title>
        <search>
          <query>
            index=indexName host=$row.host$ | stats count by Application
          </query>
          <earliest>-30d@d</earliest>
          <latest>now</latest>
        </search>
      </chart>
    </panel>
  </row>
</dashboard>

topic Re: interlinked Dashboard in Dashboards & Visualizations

interlinked Dashboard

Re: interlinked Dashboard