All Apps and Add-ons

Drilldown woes

ahogbin
Communicator

I have a rather frustrating issue in that , try as I might, I cannot get a simple table to work as a drilldown.

I have tried both 'SimpleResultsTable' and 'Table' but to no avail.

The xml is below and for the life of me I cannot work out what I am missing...( most likely something very simple but as yet it eludes me)

<param name="maxSize">1</param>
<param name="clearOnJobDispatch">True</param>
<param name="filter">*</param>



<param name="maxSize">1</param>
<param name="clearOnJobDispatch">True</param>
<param name="filter">splunk.search.job</param>







            <param name="search">index=systemout host="aalwsppdc001*" earliest=-24h@h latest=now ERROR | rex field=_raw " ERROR (?&lt;errortype&gt;[\w\.[.]+)" | top limit=50 errortype </param>
            <param name="groupLabel">Errors</param>


            <module name="EnablePreview">
              <param name="display">False</param>
              <param name="enable">True</param>
            </module>

            <module name="SimpleResultsTable">

                <module name="ViewRedirector">
                  <param name="viewTarget">flashtimeline</param>
              </module>
              </module>
             </module>

Thank you in advance for any assistance.

Cheers,

Alastair

0 Karma
1 Solution

ahogbin
Communicator

Doh.. all that I needed to add was row below the SimpleResults Table module

View solution in original post

ahogbin
Communicator

Doh.. all that I needed to add was row below the SimpleResults Table module

Get Updates on the Splunk Community!

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...

Observability protocols to know about

Observability protocols define the specifications or formats for collecting, encoding, transporting, and ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...