Dashboards & Visualizations

Drill Down behaviour question ?


I have a drill down enabled dashboard with base-searches powering the main panels and also some part of the drill down panels.  
 Lets say my main panels are A. Upon clicking on A    A1, A2,A3 panels open up.
Before implementing drilldowns, my older dashboard was showing all 4 panels(A, A1, A2, A3) the moment dashboard was loading up

My question is, 
 Does it mean that the SPL responsible for displaying result for drill-down panels A1,A2,A3 only begins to execute after I click in the  panel A ? OR the SPL for all the panel (A, A1,A2,A3 ) are executed all at once when I open the dashboard and the drill-down click merely stops me from seeing the drill-down panels output and the drilldown panels' result generating SPLs have already run in the background ?

I'm wondering, does/can the drilldown help in anyway in improving performance !!

Labels (1)
Tags (1)
0 Karma



Each search with valid query in the dashboard will execute regardless of panel visible or not.

The query is valid means, if there is No token used in search (plain search without any tokens used as a part of search ) OR any tokens which used in the search query are set with some values. If the search query is valid then it will execute on load of dashboard.


In your case, If your drilldown panels(A1,A2,A3,..) search query has token which set on the click of Panel A then it will execute only on the drilldown of panel A. So suggest to set a token in drilldown and use it in drilldown panels(A1,A2,A3,..) search query.

I hope this will help you.

▄︻̷̿┻̿═━一   ?

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.





Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...