<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to enable drilldown for only one column in the table of multiple fields in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/573278#M199797</link>
    <description>&lt;LI-CODE lang="markup"&gt; &amp;lt;option name="drilldown"&amp;gt;cell&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;condition field="sourcetype"&amp;gt;
            &amp;lt;set token="sourcetype"&amp;gt;$click.value2$&amp;lt;/set&amp;gt;
            &amp;lt;/condition&amp;gt;
          &amp;lt;condition field="*"&amp;gt;
          &amp;lt;/condition&amp;gt;
 &amp;lt;/drilldown&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;The above code let user to drilldown only on field "sourcetype". The remaining fields will be clickable but no action will be taken because of "field=*"&lt;/P&gt;</description>
    <pubDate>Tue, 02 Nov 2021 09:14:16 GMT</pubDate>
    <dc:creator>thambisetty</dc:creator>
    <dc:date>2021-11-02T09:14:16Z</dc:date>
    <item>
      <title>How to enable drilldown for only one column in the table of multiple fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/528974#M149345</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;&lt;BR /&gt;Can someone suggest me on how to enable drilldown for specific column .&lt;BR /&gt;For example ,if i have 5 columns and i have to enable drilldown on 3rd column how this can be achieved&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 21 Mar 2023 19:41:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/528974#M149345</guid>
      <dc:creator>knanaiah001</dc:creator>
      <dc:date>2023-03-21T19:41:22Z</dc:date>
    </item>
    <item>
      <title>Re: How to enable drilldown for only one column in the table of multiple fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/529068#M149374</link>
      <description>&lt;P&gt;Any suggestions please?&lt;/P&gt;</description>
      <pubDate>Thu, 12 Nov 2020 03:53:06 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/529068#M149374</guid>
      <dc:creator>knanaiah001</dc:creator>
      <dc:date>2020-11-12T03:53:06Z</dc:date>
    </item>
    <item>
      <title>Re: How to enable drilldown for only one column in the table of multiple fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/573278#M199797</link>
      <description>&lt;LI-CODE lang="markup"&gt; &amp;lt;option name="drilldown"&amp;gt;cell&amp;lt;/option&amp;gt;
        &amp;lt;drilldown&amp;gt;
          &amp;lt;condition field="sourcetype"&amp;gt;
            &amp;lt;set token="sourcetype"&amp;gt;$click.value2$&amp;lt;/set&amp;gt;
            &amp;lt;/condition&amp;gt;
          &amp;lt;condition field="*"&amp;gt;
          &amp;lt;/condition&amp;gt;
 &amp;lt;/drilldown&amp;gt;&lt;/LI-CODE&gt;&lt;P&gt;The above code let user to drilldown only on field "sourcetype". The remaining fields will be clickable but no action will be taken because of "field=*"&lt;/P&gt;</description>
      <pubDate>Tue, 02 Nov 2021 09:14:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/573278#M199797</guid>
      <dc:creator>thambisetty</dc:creator>
      <dc:date>2021-11-02T09:14:16Z</dc:date>
    </item>
    <item>
      <title>Re: How to enable drilldown for only one column in the table of multiple fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/635391#M220748</link>
      <description>&lt;P&gt;Did you find any solution ?&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 21 Mar 2023 19:27:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/635391#M220748</guid>
      <dc:creator>vik</dc:creator>
      <dc:date>2023-03-21T19:27:49Z</dc:date>
    </item>
    <item>
      <title>Re: How to enable drilldown for only one column in the table of multiple fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/635494#M220785</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/236212"&gt;@vik&lt;/a&gt;&amp;nbsp;Did you try my solution?&lt;/P&gt;</description>
      <pubDate>Wed, 22 Mar 2023 13:08:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/635494#M220785</guid>
      <dc:creator>thambisetty</dc:creator>
      <dc:date>2023-03-22T13:08:01Z</dc:date>
    </item>
    <item>
      <title>Re: How to enable drilldown for only one column in the table of multiple fields</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/635565#M220807</link>
      <description>&lt;P&gt;&lt;a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/129407"&gt;@thambisetty&lt;/a&gt;&amp;nbsp; Yes, I tried your solution it helps. But I am also trying to have the link disabled for the rest of the columns.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 22 Mar 2023 22:45:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-enable-drilldown-for-only-one-column-in-the-table-of/m-p/635565#M220807</guid>
      <dc:creator>vik</dc:creator>
      <dc:date>2023-03-22T22:45:34Z</dc:date>
    </item>
  </channel>
</rss>

