Dashboards & Visualizations

Drill down option with link for a column, search for a column and do nothing in a Dashboard Panel

armanih
Explorer

Hello Everyone. 

I want your help to build a interactive dashboard having multiple options. The aim is to perform different actions depending on the column of the dashboard.

1. If I click any field in Column A it should open a linked Dashboard In a new tab
2. If I click any field in Column B it should open a search in a new tab for that field-name
3. Do nothing for column C and D.

I tried with <condition> in drill-down but the link and search option are not working in the condition tree 
I am able to do only "$click.value2$" directly from the UI for all the fields or link to a particular row with $row.value$. 

 

If someone can help with multiple options in a single dashboard will be really helpful. Thank you. 

 

Labels (3)
0 Karma
1 Solution

niketn
Legend

@armanih Community can assist you better only if you provide more details on what you have tried and what you think is not working as expected.

Based on the details, seems like if you have table with three results and columnA is you want particular dashboard to be opened. If columnB is clicked if you want a search to open. If columnC is clicked you do not want to perform any drilldown.

You can try something like the following.

        <drilldown>
          <condition field="fieldA">
            <link target="_blank">/app/yourAppName/yourChartName</link>
          </condition>
          <condition field="fieldB">
            <link target="_blank">search?q=yourSearchQueryURLEscaped</link>            
          </condition>
          <condition>
            <!-- DO NOTHING IF COLUMN OTHER THAN component OR count is clicked 
 i.e. fieldC-->
          </condition>
        </drilldown>

Please try out and confirm!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

armanih
Explorer

Its working. Thanks for your time @niketn 

0 Karma

armanih
Explorer

Thank you Niket. I shall try out  this. 

0 Karma

niketn
Legend

@armanih Community can assist you better only if you provide more details on what you have tried and what you think is not working as expected.

Based on the details, seems like if you have table with three results and columnA is you want particular dashboard to be opened. If columnB is clicked if you want a search to open. If columnC is clicked you do not want to perform any drilldown.

You can try something like the following.

        <drilldown>
          <condition field="fieldA">
            <link target="_blank">/app/yourAppName/yourChartName</link>
          </condition>
          <condition field="fieldB">
            <link target="_blank">search?q=yourSearchQueryURLEscaped</link>            
          </condition>
          <condition>
            <!-- DO NOTHING IF COLUMN OTHER THAN component OR count is clicked 
 i.e. fieldC-->
          </condition>
        </drilldown>

Please try out and confirm!

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...