All Apps and Add-ons

Drilldown feature - Flow Map

rijutha
Explorer

Hi,

The flow map viz does not seem to support drilldown out of the box. Does anybody know if there is a way around it?

0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Hi @rijutha
I am adding limited support for drilldowns very soon, but in the meantime you can go into the formatter options and "Enable HTML labels", then add something like this to the end of your query:

|eval label = "<a href='/search/search?q=whatever' target='blank'>My node</a>"

I hope you are familiar with HTML 🙂

Also, when you click nodes, some tokens will automatically be set. Hit F12 to open your browser developer tools, then click a node. Messages will be printed to the "Console" saying what tokens are set.

Hope this helps. Thanks for using my addon

View solution in original post

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Hi @rijutha
I am adding limited support for drilldowns very soon, but in the meantime you can go into the formatter options and "Enable HTML labels", then add something like this to the end of your query:

|eval label = "<a href='/search/search?q=whatever' target='blank'>My node</a>"

I hope you are familiar with HTML 🙂

Also, when you click nodes, some tokens will automatically be set. Hit F12 to open your browser developer tools, then click a node. Messages will be printed to the "Console" saying what tokens are set.

Hope this helps. Thanks for using my addon

0 Karma

t183194
Explorer

Looking forward to drilldown functionality being added 🙂 Awesome app!

0 Karma

t183194
Explorer

A drilldown that fired when clicking on a link would be really useful (as in Daniel Spavin's Network Diagram Viz app where it tokenizes the from & to nodes)

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Just a quick followup, I have released version 1.4.3 which now sets tokens when clicking on links.
All the best,Chris

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...