Maps+ Drilldown not working

[lydiapal_splunk]

Trying to set up any kind of drilldown from Maps+, done the following:

• Enabled drilldown from visualisation settings
• Set up drilldown clicking "edit drilldown" - set up "on click link to custom search" index=main | search $row.tooltip$

Still no success, tried both single click and double click, but it doesn't take you anywhere.

Any advice?

Many thanks!

[shaskell_splunk · Accepted solution]

The drill down field can not be a reserved field that the visualization uses. With that said, the tooltip field cant be used to drill down on. Just eval it as a new field and include that in the final table.

| eval ddfield=tooltip | table ddfield

[lydiapal_splunk]

Thanks heaps, that helped!!

[shaskell_splunk]

Happy to help! Thanks for using the viz!