<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: drilldown in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21123#M764</link>
    <description>&lt;PRE&gt;&lt;CODE&gt;&amp;lt;?xml version='1.0' encoding='utf-8'?&amp;gt;
&amp;lt;dashboard&amp;gt;
&amp;lt;row&amp;gt;
&amp;lt;table&amp;gt;
&amp;lt;searchTemplate&amp;gt;
          ...search returning list of your sources...
&amp;lt;/searchTemplate&amp;gt;
&amp;lt;drilldown&amp;gt;
&amp;lt;link&amp;gt;/app/search/flashtimeline?q=source=$row.source$|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration&amp;lt;/link&amp;gt;
&amp;lt;/drilldown&amp;gt;
&amp;lt;/table&amp;gt;
&amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Sun, 04 Nov 2012 04:23:27 GMT</pubDate>
    <dc:creator>Leo</dc:creator>
    <dc:date>2012-11-04T04:23:27Z</dc:date>
    <item>
      <title>drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21122#M763</link>
      <description>&lt;P&gt;hi all,&lt;/P&gt;

&lt;P&gt;i have a list of some 50 source files like&lt;/P&gt;

&lt;P&gt;taskmanager_log(1)&lt;/P&gt;

&lt;P&gt;gpoor_tomca_log&lt;/P&gt;

&lt;P&gt;srp_log4j&lt;/P&gt;

&lt;P&gt;..&lt;/P&gt;

&lt;P&gt;what i want is if clik any source file i want to run this search query as&lt;/P&gt;

&lt;P&gt;Ex: source="taskmanager_log(1)"|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration&lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 12:43:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21122#M763</guid>
      <dc:creator>splunkpoornima</dc:creator>
      <dc:date>2020-09-28T12:43:52Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21123#M764</link>
      <description>&lt;PRE&gt;&lt;CODE&gt;&amp;lt;?xml version='1.0' encoding='utf-8'?&amp;gt;
&amp;lt;dashboard&amp;gt;
&amp;lt;row&amp;gt;
&amp;lt;table&amp;gt;
&amp;lt;searchTemplate&amp;gt;
          ...search returning list of your sources...
&amp;lt;/searchTemplate&amp;gt;
&amp;lt;drilldown&amp;gt;
&amp;lt;link&amp;gt;/app/search/flashtimeline?q=source=$row.source$|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration&amp;lt;/link&amp;gt;
&amp;lt;/drilldown&amp;gt;
&amp;lt;/table&amp;gt;
&amp;lt;/row&amp;gt;
&amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Sun, 04 Nov 2012 04:23:27 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21123#M764</guid>
      <dc:creator>Leo</dc:creator>
      <dc:date>2012-11-04T04:23:27Z</dc:date>
    </item>
    <item>
      <title>Re: drilldown</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21124#M765</link>
      <description>&lt;P&gt;to fetch the list of sources i used index=*|chart values(sources) by index..&lt;/P&gt;

&lt;P&gt;but when i click the source value ..in the search bar it shows &lt;/P&gt;

&lt;P&gt;index=*|index="xx"&lt;/P&gt;

&lt;P&gt;but the source is not displaying and also the query is also not coming&lt;/P&gt;</description>
      <pubDate>Mon, 05 Nov 2012 07:21:30 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/drilldown/m-p/21124#M765</guid>
      <dc:creator>splunkpoornima</dc:creator>
      <dc:date>2012-11-05T07:21:30Z</dc:date>
    </item>
  </channel>
</rss>

