All Apps and Add-ons

How to pass more than one column as search terms in Gate Module table drill down - Sideview Utils

pradeepkumarg
Influencer

I have a SimpleResultsTable with the below query in my Advancedxml

index=myindex sourcetype=mysourcetype | search FILE_ID="xyz" | table fieldA, fieldB, fieldC, fieldD, fieldE, fieldF

Im using a gate module to drill down to a different table on selecting a row. Below is my drilldown query on gate target module

index=myindex sourcetype=mysourcetype $row.searchTerms$ | search FILE_ID="xyz" | table fieldG, fieldH, fieldI, fieldJ

Now the $row.searchTerms$ gets only fieldA, how can I pass fieldB & fieldC along with fieldA ?

1 Solution

martin_mueller
SplunkTrust
SplunkTrust

You should be able to access those field values through $row.fields.fieldB$, $row.fields.fieldC$, etc.

Have you considered using Sideview's Table module rather than the SimpleResultsTable module?

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

You should be able to access those field values through $row.fields.fieldB$, $row.fields.fieldC$, etc.

Have you considered using Sideview's Table module rather than the SimpleResultsTable module?

pradeepkumarg
Influencer

$click.fields.fieldB$ worked for SimpleResultsTable. Thanks again!

martin_mueller
SplunkTrust
SplunkTrust

That's possible, it's been too long though since I used SimpleResultsTable... just try it out 😛

0 Karma

pradeepkumarg
Influencer

Thanks Martin, Will I be able to use $row.fields.fieldB$, $row.fields.fieldC$ only through Sideview's Table module?

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...