https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576575#M47246 <P>Unfortunately, you have redacted some of the useful information, so I would have to guess that you use&nbsp; ***** in your search query ************* which is reset by the drilldown, thereby removing it from the search results&nbsp;<span class="lia-unicode-emoji" title=":grinning_face:">😀</span> - my guess is that ***** is $shost$ - try using a different token name for transferring the selection from one panel to the next</P> Mon, 29 Nov 2021 10:06:49 GMT ITWhisperer 2021-11-29T10:06:49Z https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576453#M47233 <P>Hi,</P><P>i have added a line chart with drilldowns on a Splunk dashboard.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/17024i1CC7BADA507B9844/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>When I click on any on the data points on this chart, other line disappears. How can both the lines be kept intact during drilldowns?&nbsp;</P><P>&nbsp;</P> Fri, 26 Nov 2021 19:07:35 GMT https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576453#M47233 vikas_sood 2021-11-26T19:07:35Z https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576460#M47234 <P>Can you share your dashboard code?</P> Fri, 26 Nov 2021 21:44:48 GMT https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576460#M47234 ITWhisperer 2021-11-26T21:44:48Z https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576573#M47245 <LI-CODE lang="markup">&lt;?xml version="1.0" encoding="UTF-8"?&gt; &lt;form&gt; &lt;label&gt;Dashboard&lt;/label&gt; &lt;init&gt; &lt;set token="dname"&gt;*&lt;/set&gt; &lt;set token="shost"&gt;*&lt;/set&gt; &lt;/init&gt; &lt;row&gt; &lt;panel id="pie"&gt; &lt;title&gt;pie&lt;/title&gt; &lt;chart&gt; &lt;search&gt; &lt;query&gt;**************************************&lt;/query&gt; &lt;earliest&gt;-4h@m&lt;/earliest&gt; &lt;latest&gt;now&lt;/latest&gt; &lt;/search&gt; &lt;option name="charting.axisTitleX.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.backgroundColor"&gt;#ffffff00&lt;/option&gt; &lt;option name="charting.chart"&gt;pie&lt;/option&gt; &lt;option name="charting.chart.showPercent"&gt;1&lt;/option&gt; &lt;option name="charting.drilldown"&gt;all&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.size"&gt;small&lt;/option&gt; &lt;drilldown&gt; &lt;set token="dname"&gt;$click.value$&lt;/set&gt; &lt;set token="shost"&gt;*&lt;/set&gt; &lt;eval token="drilldown.earliest"&gt;$earliest$&lt;/eval&gt; &lt;eval token="drilldown.latest"&gt;$latest$&lt;/eval&gt; &lt;/drilldown&gt; &lt;/chart&gt; &lt;/panel&gt; &lt;panel id="timechart"&gt; &lt;title&gt;query&lt;/title&gt; &lt;chart&gt; &lt;search&gt; &lt;query&gt;**************************************&lt;/query&gt; &lt;earliest&gt;-4h@m&lt;/earliest&gt; &lt;refresh&gt;1m&lt;/refresh&gt; &lt;latest&gt;now&lt;/latest&gt; &lt;/search&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.overflowMode"&gt;ellipsisNone&lt;/option&gt; &lt;option name="charting.axisLabelsX.majorLabelStyle.rotation"&gt;-45&lt;/option&gt; &lt;option name="charting.axisTitleX.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY.text"&gt;# of Errors&lt;/option&gt; &lt;option name="charting.axisTitleY.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisTitleY2.visibility"&gt;visible&lt;/option&gt; &lt;option name="charting.axisY.abbreviation"&gt;none&lt;/option&gt; &lt;option name="charting.chart"&gt;line&lt;/option&gt; &lt;option name="charting.chart.showDataLabels"&gt;none&lt;/option&gt; &lt;option name="charting.chart.showPercent"&gt;1&lt;/option&gt; &lt;option name="charting.drilldown"&gt;all&lt;/option&gt; &lt;option name="charting.legend.placement"&gt;right&lt;/option&gt; &lt;option name="trellis.enabled"&gt;0&lt;/option&gt; &lt;option name="trellis.size"&gt;small&lt;/option&gt; &lt;option name="charting.backgroundColor"&gt;#ffffff00&lt;/option&gt; &lt;drilldown&gt; &lt;eval token="drilldown.earliest"&gt;$earliest$&lt;/eval&gt; &lt;eval token="drilldown.latest"&gt;$latest$&lt;/eval&gt; &lt;set token="shost"&gt;$click.name2$&lt;/set&gt; &lt;/drilldown&gt; &lt;/chart&gt; &lt;/panel&gt; &lt;/row&gt; &lt;row&gt; &lt;panel&gt; &lt;event&gt; &lt;title&gt;events&lt;/title&gt; &lt;search&gt; &lt;query&gt;***************************************&lt;/query&gt; &lt;earliest&gt;$drilldown.earliest$&lt;/earliest&gt; &lt;latest&gt;$drilldown.latest$&lt;/latest&gt; &lt;refresh&gt;1m&lt;/refresh&gt; &lt;refreshType&gt;delay&lt;/refreshType&gt; &lt;/search&gt; &lt;option name="list.drilldown"&gt;full&lt;/option&gt; &lt;option name="raw.drilldown"&gt;none&lt;/option&gt; &lt;option name="refresh.display"&gt;progressbar&lt;/option&gt; &lt;option name="rowNumbers"&gt;1&lt;/option&gt; &lt;option name="table.drilldown"&gt;none&lt;/option&gt; &lt;option name="type"&gt;list&lt;/option&gt; &lt;/event&gt; &lt;/panel&gt; &lt;/row&gt; &lt;/form&gt;</LI-CODE> Mon, 29 Nov 2021 09:56:46 GMT https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576573#M47245 vikas_sood 2021-11-29T09:56:46Z https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576575#M47246 <P>Unfortunately, you have redacted some of the useful information, so I would have to guess that you use&nbsp; ***** in your search query ************* which is reset by the drilldown, thereby removing it from the search results&nbsp;<span class="lia-unicode-emoji" title=":grinning_face:">😀</span> - my guess is that ***** is $shost$ - try using a different token name for transferring the selection from one panel to the next</P> Mon, 29 Nov 2021 10:06:49 GMT https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576575#M47246 ITWhisperer 2021-11-29T10:06:49Z https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576578#M47247 <P>Worked...changed shost to shost1 in timechart and events panel.</P> Mon, 29 Nov 2021 10:14:05 GMT https://community.splunk.com/t5/Dashboards-Visualizations/LineChart-drilldown/m-p/576578#M47247 vikas_sood 2021-11-29T10:14:05Z