topic How to pass fields as tokens from one panel to other panels on the same dashboard? in Splunk Search

How to pass fields as tokens from one panel to other panels on the same dashboard?

clintla — Wed, 07 Sep 2016 00:04:34 GMT

Not finding any examples so far, but not sure if it's possible.

Wanting to have one dashboard panel that has a result, say 4 values in FIELD1, & then I want to use all the values found & pass to all the other dashboard panels as a token to search for.

It would even be cool to click on a value in FIELD1 & then have it populate to the rest of the dashboards.

Is this possible & straight forward to do?

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

sundareshr — Wed, 07 Sep 2016 00:38:24 GMT

You can either have the 4 values in a dropdown or in a Link List.

Start here: http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/tokens#Define_tokens_for_form_inputs

If this doesn't help, share your dashboard code

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

snoobzilla — Wed, 07 Sep 2016 02:18:25 GMT

In short, yes, it is possible. I have dashboards where you click on any of 3 charts/tables to select what is broken out in another 2 panels.

The documentation provided above should get you started. There is a learning curve... but not too bad. I would take a look at the Splunk example dashboards too.

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

somesoni2 — Wed, 07 Sep 2016 02:33:52 GMT

What you seek is called Contextual drilldown OR IN-page drilldown in Splunk. See following link for details and working sample.

http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/Understandbasictableandchartdrilldownactions#Contextual_drilldown_elements

You can also see the it's example in Drilldown section of the Splunk 6 Dashboard Example App.

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

clintla — Wed, 26 Oct 2016 23:06:54 GMT

All this info was great.. got it all working.. thanks!