topic Re: Pie chart drilldown help in Splunk Search

Pie chart drilldown help

pinzer — Thu, 21 Oct 2010 16:05:11 GMT

Hi all, i need to change the search query when clicking on a slice of the pie chart. I need to add "| where " to the standard query. How can i do this? thanks

Re: Pie chart drilldown help

ftk — Thu, 21 Oct 2010 19:28:35 GMT

There is a section in the documentation that covers this with an example: http://www.splunk.com/base/Documentation/latest/Developer/TableChartDrilldown#Swap_out_the_underlying_search

Re: Pie chart drilldown help

sideview — Fri, 22 Oct 2010 05:40:16 GMT

The link Felix mentioned is a good one. http://www.splunk.com/base/Documentation/latest/Developer/TableChartDrilldown#Swap_out_the_underlying_search

And if you want more details check out the 'UI Examples for 4.1' app on splunkbase, which has a lot of different examples of drilldown patterns, from simple configurations to what it calls 'custom wiring' configurations like this one. You may be able to get more out of the app's discussion on these topics than from the docs.