topic Re: passing a variable/token through link search in Splunk Search

passing a variable/token through link search

smolcj — Wed, 19 Dec 2012 11:42:41 GMT

hi,
i have a simple xml form with a dropdown box and several single value panels. how can i pass the token from dropdown box through link search something like
index=main source=$sources$ sourcetype=plog |transaction startswith="Start"
i tried replacing $sources$ with form.source row.source.. but it is not working fine.
please help
Thank you

Re: passing a variable/token through link search

Leo — Thu, 20 Dec 2012 08:09:55 GMT

Try this example and see if it helps with your situation.

Re: passing a variable/token through link search

smolcj — Thu, 20 Dec 2012 09:29:27 GMT

how can i do it with single value panel? link search option in single value panel behaves like static

Re: passing a variable/token through link search

Leo — Thu, 20 Dec 2012 19:35:47 GMT

It should work the same way. I've added a single value field to the previous example:
http://pastebin.com/BmW96WmQ

Re: passing a variable/token through link search

smolcj — Fri, 21 Dec 2012 05:11:13 GMT

Sorry Leo, that is not what i want, here in your single value panel you have a field called count, is it? i want to drill down by clicking to that count field. how to embed the drill down in table to this single value output. i heard from nick that dirill down in single value panel cannot be dynamic, so i am thinking of closing this question
Thank you