topic Re: Drilldown close button in Splunk Search

Drilldown close button

akankshayadav — Wed, 02 Jun 2021 06:27:11 GMT

i have a table with multiple values, and on click of any of the value, an inline panel opens (using depends option) via drilldown. now i want that panel to close on click of a button. But also, i need the action of drilldown to open on the click of tables data not on click of button. I just need a close button to close the panel after drilldown, the panel open action is perfect (i.e on click of table value).

Re: Drilldown close button

gcusello — Wed, 02 Jun 2021 06:35:55 GMT

Hi @akankshayadav,

I think that you have a condition in your secondary panel like

so you have to add to your inputs (in the form header or in the panel):

<input type="radio" token="resetTokens" searchWhenChanged="true"> <label></label> <choice value="reset">Reset Inputs</choice> <choice value="retain">Retain</choice> <default>retain</default> <change> <condition value="reset"> <unset token="my_field"></unset> <set token="resetTokens">retain</set> </condition> </change> </input>

If you share your dashbord, I could be more precise

Ciao.

Giuseppe

Re: Drilldown close button

akankshayadav — Wed, 02 Jun 2021 07:08:51 GMT

This is my dashboard panel code .Any help?

Re: Drilldown close button

gcusello — Wed, 02 Jun 2021 07:24:29 GMT

Hi @akankshayadav,

try to add my input to your dashboard replacing $my_field$ with $token_file$.

Ciao.

Giuseppe

Re: Drilldown close button

akankshayadav — Wed, 02 Jun 2021 07:26:28 GMT

in which line should i add in my code?

Re: Drilldown close button

gcusello — Wed, 02 Jun 2021 08:16:20 GMT

Hi @akankshayadav,

they are inputs, so you can put them between <fieldset> tags or inside a panel (between <title> and <table>).

Ciao.

Giuseppe

Re: Drilldown close button

akankshayadav — Wed, 02 Jun 2021 08:29:56 GMT

Thanks a lot !

Re: Drilldown close button

gcusello — Wed, 02 Jun 2021 08:37:34 GMT

Hi @akankshayadav,

if this answer solves your need, please, accept it for the other people of Community.

Ciao and happy splunking.

Giuseppe

P.S.: Karma Points are appreciated ;_)