All Apps and Add-ons

Sideview Multiple Column Drilldown

kmattern
Builder

I have a table with three columns. Each column lists a specific type of product by name. I want to click on any cell in the table and pass the content of that cell to a second search which will display information about when customers downloaded that product. I have no problem passing one specific column, such as $row.fields.COLUMN-NAME$ but that limits me to one column. I thought that if I strung all three columns together in my search that only the one I clicked on would be passed but instead all three are passed.

I've tried the various options found in drilldown1_tables view in Sideview Utils but they don't work. It will probably be a 'doh moment when I figure it out but as of now I'm stumped.

0 Karma

somesoni2
Revered Legend

What you can do is to configure your table for cell level drilldown and then use the value "$click.value2$" to extract the value of cell clicked.

<module name="SimpleResultsTable" layoutPanel="panel_row1_col1">
            <param name="drilldown">cell</param>
              ....
              ....
             <param name="fieldname">
                      <param name="value">$click.value2$</param>
0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...