https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594818#M48780 <P>Because of the transpose, the field is now called "row 1" not "I" or "II", so you need to build your conditions based on what was clicked</P><LI-CODE lang="markup"> &lt;drilldown&gt; &lt;condition match="'click.value' == &amp;quot;I&amp;quot;"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;condition match="'click.value' == &amp;quot;II&amp;quot;"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;condition match="'click.value' == &amp;quot;III&amp;quot;"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;/drilldown&gt;</LI-CODE> Fri, 22 Apr 2022 08:14:43 GMT ITWhisperer 2022-04-22T08:14:43Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594717#M48771 <P>After issuing a transpose command on my bar chart visualization I can't configure conditional drilldowns.</P> <P>I tried using the untable command followed by the xyz series command and no luck.<BR /><BR />this is the query:</P> <P>&nbsp;</P> <LI-CODE lang="markup">search * | eval CATI = if(SEVCAT=="I", 1,0) | eval CATII = if(SEVCAT=="II", 1,0) | eval CATIII = if(SEVCAT=="III", 1,0) | chart sum(CATI) as I sum(CATII) as II sum(CATIII) as III | transpose | sort - "row 1"</LI-CODE> <P>&nbsp;</P> <P>&nbsp;</P> <P>The Drilldown XML :</P> <P>&nbsp;</P> <LI-CODE lang="markup">&lt;drilldown&gt; &lt;condition field = "I"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;condition field = "II"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;condition field = "III"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;/drilldown&gt;</LI-CODE> <P>&nbsp;</P> <P>&nbsp;</P> <P>Any help is appreciated.</P> <P>Thank you,&nbsp;<BR />Marco</P> <P>&nbsp;</P> Thu, 21 Apr 2022 18:45:30 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594717#M48771 Marco_Develops 2022-04-21T18:45:30Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594767#M48772 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/239529">@Marco_Develops</a>&nbsp;<BR /><BR />Try the following. Update your search this way..<BR /><BR /></P><LI-CODE lang="markup">your base search |chart count over SEVCAT</LI-CODE><P>&nbsp;</P><P>And configure the dashboard panel drilldown to the following.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Gr0und_Z3r0_0-1650586299751.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/19188iF3D3789DAC009F58/image-size/medium?v=v2&amp;px=400" role="button" title="Gr0und_Z3r0_0-1650586299751.png" alt="Gr0und_Z3r0_0-1650586299751.png" /></span></P><P><BR />If it helps, karma points are appreciated!</P> Fri, 22 Apr 2022 00:12:08 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594767#M48772 Gr0und_Z3r0 2022-04-22T00:12:08Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594818#M48780 <P>Because of the transpose, the field is now called "row 1" not "I" or "II", so you need to build your conditions based on what was clicked</P><LI-CODE lang="markup"> &lt;drilldown&gt; &lt;condition match="'click.value' == &amp;quot;I&amp;quot;"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;condition match="'click.value' == &amp;quot;II&amp;quot;"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;condition match="'click.value' == &amp;quot;III&amp;quot;"&gt; &lt;link target="blank"&gt;&lt;/link&gt; &lt;/condition&gt; &lt;/drilldown&gt;</LI-CODE> Fri, 22 Apr 2022 08:14:43 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594818#M48780 ITWhisperer 2022-04-22T08:14:43Z https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594877#M48791 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp; Thank you!! Also,&nbsp; great explanation.</P><P>-Marco</P> Fri, 22 Apr 2022 14:35:38 GMT https://community.splunk.com/t5/Dashboards-Visualizations/How-to-configure-Drilldown-after-using-transpose-command/m-p/594877#M48791 Marco_Develops 2022-04-22T14:35:38Z