Dashboards & Visualizations

Drill down

uagraw01
Motivator

Hello Splunkers!!

I have below code for my Dashboard. In this code I have an issue with two panels. The two I have mentioned below. In "<title>Vulnerable panel" i have used drilldown and use that drill down in "<title>Vulnerabilities</title>" panel. But the drilldown is not working . My expectations once click any value from the above panel the below panel values will populate. Please suggest me some ideas on the same.

Panel :<title>Vulnerable Hosts : Selected host is "$hostname$"</title>

 

Panel : <title>Vulnerabilities</title>

Dashboard link:  https://drive.google.com/file/d/1UCguHdcAfIcz2QXOUJvvULxGE-YSDuVj/view?usp=drivesdk

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

you cannot use tokens in the main dashboard title, eventually you can put it in panels' title.

I usually use a single panel in the top of the dashboard containing the token as title.

Ciao.

Giuseppe

0 Karma

uagraw01
Motivator

Sure @gcusello noted the things. Can you please help me with the drilldown related issue ?

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @uagraw01,

as I said, you cannot use a token in the dashboard title.

you can create in the top of the secondary dashboard a Single Value panel using the following search:

| makeresults | head 1 | field="$hostname$" | table field

that takes the value from the drilldown.

Ciao.

Giuseppe

0 Karma

uagraw01
Motivator

@gcusello 

<option name="drilldown">row</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <set token="click_val">$click.value2$</set>
        </drilldown>

That is the token i am using in drilldown. Previously the token was worked fine but after modified changes in the query the drilldown token was not worked.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...