Dashboard Drilldown Get Index of Click MV Field

[fredclown]

In a simple XML dashboard is there a way to get the index of a clicked mv field in a dashboard drilldown? For instance, if I click on 5 in the count field of row 1 I would like to also get the user bob into a token. If I know the index of the count that I clicked on I could use $row.user$ and then split it by comma and keep the one with the same index as the count that was clicked. Or maybe there is an even better way to do this ... I'm all ears.

host	user	time	count
host1	bob joe	2023-07-05 07:36:51 2023-07-05 07:49:32	5 4
host2	steve john	2023-07-05 09:22:02 2023-07-05 06:14:12	4 4

I suppose I could do something like combining values in a field and parsing it on click like the below examples. However, if possible, I would like to have them in separate fields as I think it looks nicer.

host	user	time	count
host1	bob joe	2023-07-05 07:36:51 2023-07-05 07:49:32	5 {bob} 4 {joe}
host2	steve john	2023-07-05 09:22:02 2023-07-05 06:14:12	4 {steve} 4 {john}

OR

host	user | time | count
host1	bob | 2023-07-05 07:36:51 | 5 joe | 2023-07-05 07:49:32 | 4
host2	steve | 2023-07-05 09:22:02 | 4 john | 2023-07-05 06:14:12 | 4

[richgalloway · Accepted solution]

Drilldowns are by row or cell.  There is no smaller unit, like word or character.  If you have a compelling case for it then make the suggestion at https://ideas.splunk.com

[fredclown]

I understand that it is by row or cell. I'm clicking on a mv cell and wondering if there is a way to get the index of the cell item I clicked on. My hunch is no ... I've been searching and not finding anything, but thought I would reach out to the experts to see if there might be a trick I'm unaware of.

[richgalloway]

Cell is the smallest clickable unit (in a table).  There's no way to determine *where* in the cell it was clicked because Splunk just knows the cell itself was clicked.