<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Why is the condition tag in my drilldown not working as expected and how do I fix this behavior? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129872#M35332</link>
    <description>&lt;P&gt;Thank you.&lt;/P&gt;</description>
    <pubDate>Tue, 10 Feb 2015 07:20:47 GMT</pubDate>
    <dc:creator>adityapavan18</dc:creator>
    <dc:date>2015-02-10T07:20:47Z</dc:date>
    <item>
      <title>Why is the condition tag in my drilldown not working as expected and how do I fix this behavior?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129870#M35330</link>
      <description>&lt;P&gt;Hi All&lt;BR /&gt;
I have a dashboard as following:&lt;BR /&gt;
Panel 2 is a table I am enabling drilldown on column "general_exception_type" using a condition tag.&lt;BR /&gt;
I am expecting the drilldown to happen when a value in general_exception_type column is clicked, and nothing should happen when I click any value in count column.&lt;/P&gt;

&lt;P&gt;After adding the condition tag, the drilldown is working on the general_exception_type column value when clicked, but when i click on a value in the count column (i expected nothing to happen), it's opening a search window. How do I disable that behavior?&lt;/P&gt;

&lt;P&gt;I only need the drilldown to work when clicking on any value in column1 and nothing when clicked on any other value in column.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;dashboard&amp;gt;
      &amp;lt;label&amp;gt;Error Token Dashboard&amp;lt;/label&amp;gt;
      &amp;lt;description/&amp;gt;
      &amp;lt;row&amp;gt;
        &amp;lt;panel&amp;gt;
          &amp;lt;single&amp;gt;
            &amp;lt;title&amp;gt;Tokens Found&amp;lt;/title&amp;gt;
            &amp;lt;option name="classField"&amp;gt;range&amp;lt;/option&amp;gt;
            &amp;lt;searchString&amp;gt;index=sample | stats count by general_exception_type | stats count&amp;lt;/searchString&amp;gt;
            &amp;lt;earliestTime&amp;gt;@d&amp;lt;/earliestTime&amp;gt;
            &amp;lt;latestTime&amp;gt;now&amp;lt;/latestTime&amp;gt;
            &amp;lt;option name="drilldown"&amp;gt;all&amp;lt;/option&amp;gt;
            &amp;lt;option name="beforeLabel"&amp;gt;Number Of Error Tokens found in the logs today&amp;lt;/option&amp;gt;
            &amp;lt;drilldown&amp;gt;
                &amp;lt;set token="tk"&amp;gt;$click.value$&amp;lt;/set&amp;gt;
            &amp;lt;/drilldown&amp;gt;
          &amp;lt;/single&amp;gt;
        &amp;lt;/panel&amp;gt;
        &amp;lt;panel&amp;gt;
          &amp;lt;table depends="$tk$"&amp;gt;
            &amp;lt;title&amp;gt;Tokens List&amp;lt;/title&amp;gt;
            &amp;lt;searchString&amp;gt;index=sample | stats count by general_exception_type&amp;lt;/searchString&amp;gt;
            &amp;lt;earliestTime&amp;gt;@d&amp;lt;/earliestTime&amp;gt;
            &amp;lt;latestTime&amp;gt;now&amp;lt;/latestTime&amp;gt;
            &amp;lt;option name="drilldown"&amp;gt;row&amp;lt;/option&amp;gt;
            &amp;lt;drilldown&amp;gt;
              &amp;lt;condition field="general_exception_type"&amp;gt;
                &amp;lt;set token="exception"&amp;gt;$row.general_exception_type$&amp;lt;/set&amp;gt;
              &amp;lt;/condition&amp;gt;
            &amp;lt;/drilldown&amp;gt;
          &amp;lt;/table&amp;gt;
        &amp;lt;/panel&amp;gt;
      &amp;lt;/row&amp;gt;
      &amp;lt;row&amp;gt;
        &amp;lt;panel&amp;gt;
        &amp;lt;event depends="$exception$"&amp;gt;
           &amp;lt;title&amp;gt;Token Events&amp;lt;/title&amp;gt;
            &amp;lt;searchString&amp;gt;index=sample general_exception_type=$exception$&amp;lt;/searchString&amp;gt;
          &amp;lt;earliestTime&amp;gt;@d&amp;lt;/earliestTime&amp;gt;
            &amp;lt;latestTime&amp;gt;now&amp;lt;/latestTime&amp;gt;
           &amp;lt;option name="drilldown"&amp;gt;none&amp;lt;/option&amp;gt;
        &amp;lt;/event&amp;gt;
        &amp;lt;/panel&amp;gt;
      &amp;lt;/row&amp;gt;
    &amp;lt;/dashboard&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Mon, 28 Sep 2020 18:51:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129870#M35330</guid>
      <dc:creator>adityapavan18</dc:creator>
      <dc:date>2020-09-28T18:51:20Z</dc:date>
    </item>
    <item>
      <title>Re: Why is the condition tag in my drilldown not working as expected and how do I fix this behavior?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129871#M35331</link>
      <description>&lt;P&gt;The below code will force the other fields to disable drilldown&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;drilldown&amp;gt;
&amp;lt;condition field="general_exception_type"&amp;gt;
&amp;lt;set token="exception"&amp;gt;$row.general_exception_type$&amp;lt;/set&amp;gt;
&amp;lt;/condition&amp;gt;
&amp;lt;condition field="*"&amp;gt;
&amp;lt;/condition&amp;gt;
&amp;lt;/drilldown&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 05 Feb 2015 01:26:32 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129871#M35331</guid>
      <dc:creator>ramdaspr</dc:creator>
      <dc:date>2015-02-05T01:26:32Z</dc:date>
    </item>
    <item>
      <title>Re: Why is the condition tag in my drilldown not working as expected and how do I fix this behavior?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129872#M35332</link>
      <description>&lt;P&gt;Thank you.&lt;/P&gt;</description>
      <pubDate>Tue, 10 Feb 2015 07:20:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Why-is-the-condition-tag-in-my-drilldown-not-working-as-expected/m-p/129872#M35332</guid>
      <dc:creator>adityapavan18</dc:creator>
      <dc:date>2015-02-10T07:20:47Z</dc:date>
    </item>
  </channel>
</rss>

