Dashboards & Visualizations

Drilldown only cell, not row for columns in splunk table visualization in splunk classic dashboard?

MT_HD
Engager

Hi splunkers, 

I am trying to create table visualization in splunk classic dashboard. My table has many columns, but only  three(3) columns task_link, sight_link, and feedback_link which have hyperlinks. I created drilldown for task_link column, but it is activating row, instead of clicked cell

How to create drilldown for task_link, sight_link and feedback_link, and it should open only clicked cell?

 

 

<dashboard theme="light">
  <label>dashboard_classic</label>
  <row>
    <panel>
      <title>Report</title>
      <table>
        <title>Report</title>
        <search>
          <query>
            index=* source IN (*) st_id IN (*) component IN (*) tc_name IN (*)
        | eval TruePredScore=round(TruePredScore, 2)
        | table "st_id" "component" "task_link" "sight_link" "TruePredScore" "PredictType"  "feedback_link"
          </query>
          <earliest>-10h@m</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
          <refresh>10m</refresh>
          <refreshType>delay</refreshType>
        </search>
        
        <drilldown>
           <link target="_blank">$row.task_link|n$</link>
         </drilldown>
        
        <option name="count">6</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</dashboard>

 

 

 

 

 

Labels (4)
0 Karma
1 Solution

yeahnah
Motivator

Hi @MT_HD 

Here's a link to the Splunk docs on drilldown links

https://docs.splunk.com/Documentation/Splunk/latest/Viz/DrilldownLinkToURL

I believe you need to use the $click.value$ token in this case, assuming the cell value is a valid URL

        <drilldown>
           <link target="_blank">$click.value|n$</link>
         </drilldown>

 Hope that helps

View solution in original post

0 Karma

MT_HD
Engager

This is the way i changed and it fixed the issue. thanks for your response, @yeahnah .

 

<drilldown>
          <condition field="task_link">
            <link target="_blank">$row.task_link|n$</link>
          </condition>
          <condition field="sight_link">
            <link target="_blank">$row.sight_link|n$</link>
          </condition>
          <condition field="feedback_link">
            <link target="_blank">$row.feedback_link|n$</link>
          </condition>
          <condition field="*"></condition>
</drilldown>

 

 

yeahnah
Motivator

Hi @MT_HD 

Here's a link to the Splunk docs on drilldown links

https://docs.splunk.com/Documentation/Splunk/latest/Viz/DrilldownLinkToURL

I believe you need to use the $click.value$ token in this case, assuming the cell value is a valid URL

        <drilldown>
           <link target="_blank">$click.value|n$</link>
         </drilldown>

 Hope that helps

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...