Dashboards & Visualizations

Drill down

uagraw01
Motivator

Hello Splunkers!!

I have below code for my Dashboard. In this code I have an issue with two panels. The two I have mentioned below. In "<title>Vulnerable panel" i have used drilldown and use that drill down in "<title>Vulnerabilities</title>" panel. But the drilldown is not working . My expectations once click any value from the above panel the below panel values will populate. Please suggest me some ideas on the same.

Panel :<title>Vulnerable Hosts : Selected host is "$hostname$"</title>

 

Panel : <title>Vulnerabilities</title>

Dashboard link:  https://drive.google.com/file/d/1UCguHdcAfIcz2QXOUJvvULxGE-YSDuVj/view?usp=drivesdk

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

you cannot use tokens in the main dashboard title, eventually you can put it in panels' title.

I usually use a single panel in the top of the dashboard containing the token as title.

Ciao.

Giuseppe

0 Karma

uagraw01
Motivator

Sure @gcusello noted the things. Can you please help me with the drilldown related issue ?

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

as I said, you cannot use a token in the dashboard title.

you can create in the top of the secondary dashboard a Single Value panel using the following search:

| makeresults | head 1 | field="$hostname$" | table field

that takes the value from the drilldown.

Ciao.

Giuseppe

0 Karma

uagraw01
Motivator

@gcusello 

<option name="drilldown">row</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <set token="click_val">$click.value2$</set>
        </drilldown>

That is the token i am using in drilldown. Previously the token was worked fine but after modified changes in the query the drilldown token was not worked.
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...