Dashboards & Visualizations

Drill down value from bar chart to single value in dashboard studio

dtccsundar
Path Finder

Hi,

I am new to dashboard studio .

How to create a drill down from bar chart to a single value chart dynamically in dashboard studio.Bar chart has sourcetypes( Pass,fail,error) counts  in y axis and count in x-axis.

The single value chart have to show independent counts of Pass,fail,error upon selection in bar chart. 

Labels (2)
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

@dtccsundar 

In Splunk Dashboard Studio, right now there is no support for tokens on drilldown like Simple xml. Only URL redirect is supported.

 

https://docs.splunk.com/Documentation/Splunk/8.2.2/DashStudio/IntroFrame

 

Screenshot 2021-10-11 at 8.01.04 PM.png

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. 

View solution in original post

kamlesh_vaghela
SplunkTrust
SplunkTrust

@dtccsundar 

In Splunk Dashboard Studio, right now there is no support for tokens on drilldown like Simple xml. Only URL redirect is supported.

 

https://docs.splunk.com/Documentation/Splunk/8.2.2/DashStudio/IntroFrame

 

Screenshot 2021-10-11 at 8.01.04 PM.png

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. 

dtccsundar
Path Finder

Thank you .

Please let me know ,how the same can be achieved in classic dashboards .

 

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@dtccsundar 

Try this Simple XML.

<dashboard>
  <label>Bar drill</label>
  <row>
    <panel>
      <chart>
        <search>
          <query>| makeresults count=2 | eval sourcetypes="Pass,fail,error"| eval sourcetypes=split(sourcetypes,",") | stats count by sourcetypes</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">bar</option>
        <option name="charting.drilldown">all</option>
        <drilldown>
          <set token="tkn">$click.value2$</set>
        </drilldown>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <single>
        <search>
          <query>| makeresults count=1 | eval sourcetypes="$tkn$"| table sourcetypes</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
</dashboard>

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

0 Karma

dtccsundar
Path Finder

Apologies for wrong requirement earlier.

Need help for the below,

The sourcetypes has different values in it like below ,

index=a sourcetype=b |eval details=1

|append [|search index=c sourcetype=d|eval details=2]

|append [|search index=e sourcetype=f|eval details=3]

|eventstats count by details|

Pass%=count(pass)/total*100,2

Fail%=count(fail)/total*100,2

Error%=count(Error)/total*100,2

|table pass fail error total

I have a barchart with x-axis with details and y-axis %(pass%,fail%,error%) of ( pass fail error etc).When i click the details(x-axis) in barchart , the single value should show number of individual Pass,fail,error in trellis.

Please let me know how this can be achieved . 

Tags (1)
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...