All Apps and Add-ons

SideviewUtil drill down to a new dashboard with tokens

infotork
Explorer

Am getting parameter in url ://sdjfsd:8000/app/myapp?host=Asia

i failed to replace the value of host in destination dashboard

please help. two source and destination xml file are below

Source Dashbaord







False
*
1



True
splunk.search.job
warn
1


COA Summary
0
<![CDATA[index=nm | rex field=Message "(?(Started|Failed|COMPLETED))" | table Region, Event_Time, Status ]]>


maxLines
type
table.wrap
dataOverlayMode
rowNumbers
list.drilldown
wrap
drilldown
raw.drilldown
table.drilldown
list.wrap


True


10
results

True
False

all

          <module name="Redirector">

            <param name="url">monitoring</param>   
            <param name="arg.host">$click.value$</param>
         </module>
        </module>

      </module>
    </module>
  </module>
</module>

Destination Dashboard







*
2
False

<module name="Search" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="search">
        <![CDATA[ index=nm host= $host$ | table  Region,  Event_Time,Message, log_file, mailsentto]]></param>
    <param name="earliest">0</param>
    <param name="latest">now</param>
    <module name="JobProgressIndicator"/>
    <module name="Paginator" layoutPanel="panel_row2_col1" group="Search Results">
        <param name="count">10</param>
        <param name="entityName">results</param>
        <param name="groupLabel">Search Results</param>
        <module name="EnablePreview">
            <param name="enable">True</param>
            <param name="display">False</param>
            <module name="SimpleResultsTable">
                <param name="entityName">results</param>
                <param name="allowTransformedFieldSelect">True</param>
                <module name="Gimp"/>
            </module>
        </module>
    </module>
</module>

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

I didn't read through your forest of modules, but I didn't find the URLLoader module being referenced so I'm guessing you're missing that. See http://yoursplunkhost:8000/en-US/app/sideview_utils/linking for reference.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

I didn't read through your forest of modules, but I didn't find the URLLoader module being referenced so I'm guessing you're missing that. See http://yoursplunkhost:8000/en-US/app/sideview_utils/linking for reference.

0 Karma
Get Updates on the Splunk Community!

Splunk APM & RUM | Upcoming Planned Maintenance

There will be planned maintenance of the streaming infrastructure for Splunk APM and Splunk RUM in the coming ...

Part 2: Diving Deeper With AIOps

Getting the Most Out of Event Correlation and Alert Storm Detection in Splunk IT Service Intelligence   Watch ...

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...