Dashboards & Visualizations

Drilldown only cell, not row for columns in splunk table visualization in splunk classic dashboard?

MT_HD
Engager

Hi splunkers, 

I am trying to create table visualization in splunk classic dashboard. My table has many columns, but only  three(3) columns task_link, sight_link, and feedback_link which have hyperlinks. I created drilldown for task_link column, but it is activating row, instead of clicked cell

How to create drilldown for task_link, sight_link and feedback_link, and it should open only clicked cell?

 

 

<dashboard theme="light">
  <label>dashboard_classic</label>
  <row>
    <panel>
      <title>Report</title>
      <table>
        <title>Report</title>
        <search>
          <query>
            index=* source IN (*) st_id IN (*) component IN (*) tc_name IN (*)
        | eval TruePredScore=round(TruePredScore, 2)
        | table "st_id" "component" "task_link" "sight_link" "TruePredScore" "PredictType"  "feedback_link"
          </query>
          <earliest>-10h@m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>10m</refresh>
          <refreshType>delay</refreshType>
        </search>
        
        <drilldown>
           <link target="_blank">$row.task_link|n$</link>
         </drilldown>
        
        <option name="count">6</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</dashboard>

 

 

 

 

 

Labels (4)
0 Karma
1 Solution

yeahnah
Motivator

Hi @MT_HD 

Here's a link to the Splunk docs on drilldown links

https://docs.splunk.com/Documentation/Splunk/latest/Viz/DrilldownLinkToURL

I believe you need to use the $click.value$ token in this case, assuming the cell value is a valid URL

        <drilldown>
           <link target="_blank">$click.value|n$</link>
         </drilldown>

 Hope that helps

View solution in original post

0 Karma

MT_HD
Engager

This is the way i changed and it fixed the issue. thanks for your response, @yeahnah .

 

<drilldown>
          <condition field="task_link">
            <link target="_blank">$row.task_link|n$</link>
          </condition>
          <condition field="sight_link">
            <link target="_blank">$row.sight_link|n$</link>
          </condition>
          <condition field="feedback_link">
            <link target="_blank">$row.feedback_link|n$</link>
          </condition>
          <condition field="*"></condition>
</drilldown>

 

 

yeahnah
Motivator

Hi @MT_HD 

Here's a link to the Splunk docs on drilldown links

https://docs.splunk.com/Documentation/Splunk/latest/Viz/DrilldownLinkToURL

I believe you need to use the $click.value$ token in this case, assuming the cell value is a valid URL

        <drilldown>
           <link target="_blank">$click.value|n$</link>
         </drilldown>

 Hope that helps

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...