Add a Drilldown in Splunk Dashboard with more than 60 indexes and 68 word problem?

[Gordon1]

Hello everyone, 

How are you all doing? 

I have a dashboard ready. I'm having trouble placing the drilldowns.

The case is as follows: each index for example:  windows, linux, storage, would have to open a drilldown with the word problem. There are 68 worden problem and 60 indexes. 

Do you have any idea? 

Thank you very much!

[ITWhisperer]

It is not clear to me what you are trying to achieve. Please can you share what you currently have in your dashboard, some sample events (anonymised, of course), and what you expect to see when you click on your dashboard i.e. what the drilldown should do?

[Gordon1]

Hello ITWhisperer, 

Thank you very much!

I am trying to show for example the result between: Linux and attack, Linus  and error, Linux and fail, Linux and failing, Linux and failed, Linux and fout.

Dan the same with Windows, firewall, aplication. 

[ITWhisperer]

This looks like a spreadsheet rather than a Splunk dashboard. Please share what you already have in Splunk

[Gordon1]

I made this spreadsheet with the reason you can understand what I mean. I have de dashboard. 

[ITWhisperer]

Cool 😀 Please can you share what you already have?

[Gordon1]

I go it!!!

[ITWhisperer · Accepted solution]

OK so, on which chart or table do you want to add a drilldown?