All Apps and Add-ons

drill-down doesn't work with base query for calendar custom visualization

praphulla1
Path Finder

We are using calendar visualization for showing events in dashboard. I have tried to add drill-down behavior by using click.value. This works perfectly if i don't use base search. Once i switch to base search it click.value works only for first event.

Is there a work around for this issue ?

  <row>
    <panel>
      <viz type="calendar_app.calendar">
        <title>Calendar View - click_value: $selected_value$ date: $date$</title>
        <search base="pto_search">
          <query>|eval _time=time | search dataType=ptoData | timechart span=1d count by resourceName</query>
        </search>
        <option name="calendar_app.calendar.calendarView">month</option>
        <option name="calendar_app.calendar.showWeekNumbers">false</option>
        <option name="calendar_app.calendar.showWeekends">false</option>
        <option name="height">550</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <set token="selected_value">$click.value$</set>
          <eval token="date">strftime($click.value$,"%d-%b-%Y")</eval>
        </drilldown>
      </viz>
    </panel>
  </row>
Labels (3)
0 Karma

ivan_yanev
Explorer

I have the exact same issue. If I set the dashboard to refresh every 1 minute then I get the token value applied on the visualization every 1 minute....no matter how many times you click on the filter viz.

0 Karma
Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...