Drilldown not working on some of the trellis results

[Taruchit]

Hello All,

I have a dashboard with trellis layout in the panel. I need to drilldown based on the dynamic values for which trellis is generated. The challenge is out of three charts that trellis gives, the drilldown works on two of them. On the third one, no action happens when I click over the chart.

<row>
<panel>
<title>
<chart>
<search>
<query>index=...
</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleratio>
</search>
<option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
<option name="charting.axisLabelsX.majorLabelStyle.rotation">0</option>
<option name="charting.axisTitleX.visibility">collapsed</option>
<option name="charting.axisTitleY.visibility">collapsed</option>
<option name="charting.axisTitleY2.visibility">collapsed</option>
<option name="charting.axisX.abbreviation">none</option>
<option name="charting.axisX.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY.scale">linear</option>
<option name="charting.axisY.abbreviation">none</option>
<option name="charting.axisY2.enabled">0</option>
<option name="charting.axisY2.scale">inherit</option>
<option name="charting.chart">column</option>
<option name="charting.chart.bubbleMaximumSize">50</option>
<option name="charting.chart.bubbleMinimumSize">10</option>
<option name="charting.chart.bubbleSizeBy">area</option>
<option name="charting.chart.nullValueMode">gaps</option>
<option name="charting.chart.overlayFields">median_count</option>
<option name="charting.chart.showDataLabels">none</option>
<option name="charting.chart.sliceCollapsingThreshold">0.01</option>
<option name="charting.chart.stackMode">default</option>
<option name="charting.chart.style">shiny</option>
<option name="charting.drilldown">all</option>
<option name="charting.layout.splitSeries">0</option>
<option name="charting.layout.splitSeries.allowIndependentYRanges">0</option>
<option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
<option name="charting.legend.mode">standard</option>
<option name="charting.legend.placement">none</option>
<option name="charting.lineWidth">2</option>
<option name="refresh.display">progressbar</option>
<option name="trellis.enabled">1</option>
<option name="trellis.scales.shared">0</option>
<option name="trellis.size">small</option>
<drilldown>
<link target="_blank">/xxx/yyy/zzz?test_Tok=$trellis.value$</link>
</drilldown>
</chart>
</panel>
</row>

The trellis gives vertical column charts arranged one after the other horizontally.

Thus, your inputs to resolve the issue will be very helpful.

Thank you

Taruchit

[jkat54]

https://docs.splunk.com/Documentation/Splunk/latest/Viz/EventHandlerReference#chart_.28event_tokens.....

Depending on if you want the X or Y axis value, you'll want to use tokens from above reference.

[Taruchit]

Hello @jkat54,

Thank you for your inputs.

I referred to below list but it didn't help to get the result: -

Thank you

[Taruchit]

I have a very strange observation, the above issue occurs when I am passing the token value to another dashboard.

I tried to clone the existing panel, selected Manage tokens on this dashboard, defined a new token name with value $trellis.value$.

Then passed the token in the header of the same panel. 

Thus, now when I click over any of the three trellis results, it does give me the respective value of the token in the panel header.

[ITWhisperer]

Is there something particular about the value which doesn't work? Have you tried encoding the value?

<link target="_blank">/xxx/yyy/zzz?test_Tok=$trellis.value|u$</link>

Token usage in dashboards - Splunk Documentation

[Taruchit]

Hello @ITWhisperer,

I appended the values of trellis data with string ":windows_infrastructure_data:", and the drilldown stopped working for all trellis charts. If I replace it with ":windows_infrastructure_data" or with "windows_infrastructure_data:", the drilldown works well.

Thus, do you know if there is anything in the above expression I may have not observed yet but has the potential to cause blocking of drilldown?

Thank you

[jkat54]

I think it's obvious there is a bug in the trellis drilldown and while you've found another clue I don't think it really leads me to a fix yet.  Even when I wrote jquery to "fix" it, I had all these random behaviors like you're seeing. 

[Taruchit]

Thank you @jkat54 for sharing your inputs.

Strangely, its just that expression that leads to such issue. Like when I try to remove characters from the string one by one, the drilldown works.

[Taruchit]

Hello @ITWhisperer,

Thank you for your response.

There is no distinct observation about the value of the chart on which drilldown does not take place. Moreover, on the chart where issue occurs, when I click over it with mouse, no further activity occurs.

I replaced trellis.value with trellis.value|u, refreshed the dashboard, but it still works only for 2 out of 3 visuals from the trellis.

Thank you