I have a rather frustrating issue in that , try as I might, I cannot get a simple table to work as a drilldown.
I have tried both 'SimpleResultsTable' and 'Table' but to no avail.
The xml is below and for the life of me I cannot work out what I am missing...( most likely something very simple but as yet it eludes me)
<param name="maxSize">1</param>
<param name="clearOnJobDispatch">True</param>
<param name="filter">*</param>
<param name="maxSize">1</param>
<param name="clearOnJobDispatch">True</param>
<param name="filter">splunk.search.job</param>
<param name="search">index=systemout host="aalwsppdc001*" earliest=-24h@h latest=now ERROR | rex field=_raw " ERROR (?<errortype>[\w\.[.]+)" | top limit=50 errortype </param>
<param name="groupLabel">Errors</param>
<module name="EnablePreview">
<param name="display">False</param>
<param name="enable">True</param>
</module>
<module name="SimpleResultsTable">
<module name="ViewRedirector">
<param name="viewTarget">flashtimeline</param>
</module>
</module>
</module>
Thank you in advance for any assistance.
Cheers,
Alastair
Doh.. all that I needed to add was