Drill down value from bar chart to single value in dashboard studio

[dtccsundar]

Hi,

I am new to dashboard studio .

How to create a drill down from bar chart to a single value chart dynamically in dashboard studio.Bar chart has sourcetypes( Pass,fail,error) counts  in y axis and count in x-axis.

The single value chart have to show independent counts of Pass,fail,error upon selection in bar chart. 

[kamlesh_vaghela · Accepted solution]

@dtccsundar 

In Splunk Dashboard Studio, right now there is no support for tokens on drilldown like Simple xml. Only URL redirect is supported.

https://docs.splunk.com/Documentation/Splunk/8.2.2/DashStudio/IntroFrame

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. 

[dtccsundar]

Thank you .

Please let me know ,how the same can be achieved in classic dashboards .

[kamlesh_vaghela]

@dtccsundar 

Try this Simple XML.

<dashboard>
  <label>Bar drill</label>
  <row>
    <panel>
      <chart>
        <search>
          <query>| makeresults count=2 | eval sourcetypes="Pass,fail,error"| eval sourcetypes=split(sourcetypes,",") | stats count by sourcetypes</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">bar</option>
        <option name="charting.drilldown">all</option>
        <drilldown>
          <set token="tkn">$click.value2$</set>
        </drilldown>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <single>
        <search>
          <query>| makeresults count=1 | eval sourcetypes="$tkn$"| table sourcetypes</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
</dashboard>

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

[dtccsundar]

Apologies for wrong requirement earlier.

Need help for the below,

The sourcetypes has different values in it like below ,

index=a sourcetype=b |eval details=1

|append [|search index=c sourcetype=d|eval details=2]

|append [|search index=e sourcetype=f|eval details=3]

|eventstats count by details|

Pass%=count(pass)/total*100,2

Fail%=count(fail)/total*100,2

Error%=count(Error)/total*100,2

|table pass fail error total

I have a barchart with x-axis with details and y-axis %(pass%,fail%,error%) of ( pass fail error etc).When i click the details(x-axis) in barchart , the single value should show number of individual Pass,fail,error in trellis.

Please let me know how this can be achieved .