Can you help me make a drilldown that opens a new window upon clicking?

[vrmandadi]

I have the below XML of my dashboard. The first panel is in a table format, and when clicked, it redirects to the raw data of that particular row. Now, I want the on click to open in a new window.

  <label>FADB</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="jobname" searchWhenChanged="true">
      <label>JOB Name</label>
      <choice value="*">All</choice>
      <default>*</default>
      <initialValue>*</initialValue>
      <fieldForLabel>JOB_NAME</fieldForLabel>
      <fieldForValue>JOB_NAME</fieldForValue>
      <search>
        <query>index=os host="linuxbatch-prod"  sourcetype = "fadb" done DATE=$procdate$ |table JOB_NAME |dedup JOB_NAME</query>
        <earliest>-7d@h</earliest>
        <latest>now</latest>
      </search>
    </input>
    <input type="dropdown" token="procdate" searchWhenChanged="true">
      <label>DATE</label>
      <choice value="*">All</choice>
      <default>*</default>
      <initialValue>*</initialValue>
      <fieldForLabel>DATE</fieldForLabel>
      <fieldForValue>DATE</fieldForValue>
      <search>
        <query>index=os host="linuxbatch-prod"  sourcetype = "fadb" done JOB_NAME=$jobname$ |table DATE |dedup DATE</query>
        <earliest>-7d@h</earliest>
        <latest>now</latest>
      </search>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>index=os host="linuxbatch-prod"  sourcetype = "fadb" done DATE=$procdate$  JOB_NAME=$jobname$|stats count by JOB_NAME ,DATE |sort -count</query>
          <earliest>-7d@h</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">50</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">row</option>
        <option name="percentagesRow">false</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
    <panel>
      <title>This Panel has a drop down below for the SQLDR SOURCES</title>
      <input type="dropdown" token="field1" searchWhenChanged="true">
        <label>SQLDR sources</label>
        <choice value="*">All</choice>
        <default>*</default>
        <initialValue>*</initialValue>
        <fieldForLabel>source</fieldForLabel>
        <fieldForValue>source</fieldForValue>
        <search>
          <query>index=os sourcetype=sqldr |stats count by source</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
      </input>
      <event>
        <search>
          <query>index=os sourcetype=sqldr |search source=$field1$</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="list.drilldown">none</option>
        <option name="refresh.display">progressbar</option>
      </event>
    </panel>
  </row>
</form>

Thanks

[vnravikumar]

Hi @vrmandadi

Try by specifying the query starts with search?q= and include your selected row like category=$row.category$

 <option name="drilldown">row</option>
        <drilldown>
          <link target="_blank">search?q=index=%22test%22%20sourcetype=%22csv%22%20%7C%20search%20values=$row.values$&amp;earliest=$earliest$&amp;latest=$latest$</link>
        </drilldown>
      </table>

[vrmandadi]

Thank you for your reply .I have done a similar one and that solved it.I gave a custom url option

/app/search/search?q=search%20index%3Dos%20sourcetype%3Dfadb%20host%3Dlinuxbatch-prod%20done%20JOB_NAME%3D$row.JOB_NAME$%20DATE%3D$row.DATE$%20&display.page.search.mode=fast&dispatch.sample_ratio=1&earliest=-30d&latest=now

[dflodstrom]

I think this answer will solve your issue:

https://answers.splunk.com/answers/129148/simple-xml-drilldown-to-new-window.html