Drilldown - change in input not refreshing the content in child panel

[Deprasad]

I've a dashboard built with 3 panels with Panel 1 populate the date with loading at first time.

Second panel will take input from 1st panel using drilldown and populate the data. Similarly, Third panel will take input from 2nd panel using drilldown and populate the data.

Now if I click on different value from Panel 1, Panel 2 recognize that and it will refresh the result based on the input from Panel 1 but Panel 3 will remain display the result based on the previous input from Panel 2.

Is there a way to overcome this issue like as soon as input for panel 2 changes, the panel 3 should disappear or it should change to " Search is waiting for input..."

[richgalloway]

When you click on a value in Panel 1 that is a drilldown event which updates Panel 2.  Panel 3 does not update because there was no click in Panel 2 to trigger a drilldown.

Perhaps Panel 2 could use a <done> element to unset a token used by Panel 3 until the drilldown is triggered.

[Deprasad]

Can you please elaborate a bit more, if possible with XML.

[richgalloway · Accepted solution]

The XML would look something like this

...
<panel>
  <title>Panel 2</title>
  <search>
    <query>...</query>
    <done>
      <unset token="<<some token used in Panel 3>>"/>
    </done>
    <<existing drilldown element>>
  </search>
</panel>

[Deprasad]

Thanks a lot! This works.

[meetmshah]

Hello @Deprasad,

In this case if B is dependent on A and C is dependent on B - so C is indirectly dependent on A.

Which means you can just mention A in the search of C's drill-down which will automatically re-populate the results or show "Search produced no results."

Example below - 

<form version="1.1">
  <label>Test</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="field1">
      <label>field1</label>
      <fieldForLabel>index</fieldForLabel>
      <fieldForValue>index</fieldForValue>
      <search>
        <query>| tstats count where index=* by index
| fields - count</query>
        <earliest>-15m</earliest>
        <latest>now</latest>
      </search>
    </input>
    <input type="dropdown" token="field2">
      <label>field2</label>
      <fieldForLabel>source</fieldForLabel>
      <fieldForValue>source</fieldForValue>
      <search>
        <query>| tstats count where index=$field1$ by source
| fields - count</query>
        <earliest>-15m</earliest>
        <latest>now</latest>
      </search>
    </input>
    <input type="dropdown" token="field3">
      <label>field3</label>
      <fieldForLabel>sourcetype</fieldForLabel>
      <fieldForValue>sourcetype</fieldForValue>
      <search>
        <query>| tstats count where index=$field1$ source=$field2$ by sourcetype
| fields - count</query>
        <earliest>-15m</earliest>
        <latest>now</latest>
      </search>
    </input>
  </fieldset>
</form>

Please accept the answer if it helps! 🙂