Dashboards & Visualizations

Drilldown single value to link to a specific chart in another dashboard?

AnanthaS
Path Finder

I have a single value in a classic dashboard. When I click that, I would like it to navigate to another classic dashboard and show up a specific chart. Is this possible? If yes, how can this be achieved? 

Labels (3)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @AnanthaS ,

as I said, you have to create a dashboard A containing soma Key Indicators.

clicking on each one of them (e.g. CPU status) you open a second dashboard with a detail of the information about CPU.

To do this, you need a main dashboard (A) containing all the Key Indicators and then one or more dashboards to call clicking on the Key Indicator.

If the secondary  dashboard is general (only one panel with the time distribution of the metric) you could also use one dashboard that chooses the search based on the click on the primary key Indicator, otherwise two or more dashboards.

As I said, the only tokens that you must pass to the secondary dashboard are Time.earliest and Time.latest.

Ciao.

Giuseppe

View solution in original post

AnanthaS
Path Finder

Wanted to explain the scenario better. I have dashboard A and Dashboard B. In Dashboard A I show for each metrics dimension if it is healthy or  unhealthy. Like CPU of Servers below threshold or not. Memory of the servers below thresholds or not. Then, I have Dashboard B which has muliple charts like CPU, Memory and more.

Now, the way I envisage is User comes to Dashboard A he sees one of the metrics dimention as Unhealthy then he wants to see more detail or say graph on timeline say for last 24 hours so as he can analyze if it is momentary spike or a consistent issue for last two hours.

So when he clicks on chart A which shows unhealthy I want to take the user to CPU specific chart of the 10 more charts in Dashboard B. To put it better I do want to navigate the user from Dashboard A to Dashboard B but also take him to a specific chart by may by focusing on that chart as he comes to Dashboard B.

(I know well how to navigate via Drilldown.)

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @AnanthaS ,

as I said, you have to create a dashboard A containing soma Key Indicators.

clicking on each one of them (e.g. CPU status) you open a second dashboard with a detail of the information about CPU.

To do this, you need a main dashboard (A) containing all the Key Indicators and then one or more dashboards to call clicking on the Key Indicator.

If the secondary  dashboard is general (only one panel with the time distribution of the metric) you could also use one dashboard that chooses the search based on the click on the primary key Indicator, otherwise two or more dashboards.

As I said, the only tokens that you must pass to the secondary dashboard are Time.earliest and Time.latest.

Ciao.

Giuseppe

AnanthaS
Path Finder

Thanks for being patient, apologies, I thought I wasn't clearly able to articulate or you have not got me completely. Thanks, Now, I get it.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @AnanthaS ,

it's avery easy drilldown because you don't need to pass any parameter on click, or at most the time parameters.

To do this, you can use the UI feature clicking on the three dots of the Single Value panel and adding the dashboard to link, thet you have to previously prepare.

For more infos see at https://docs.splunk.com/Documentation/Splunk/9.3.0/Viz/DrilldownIntro or some videos in YouTube Splunk Channel https://www.youtube.com/@Splunkofficial

Ciao.

Giuseppe

AnanthaS
Path Finder

I do want to navigate to Dashboard but more importantly focus on the chart of interest within. 

0 Karma

AnanthaS
Path Finder

The scenario is I created a dashboard where I show CPU , Memory if it violates threshold and once the user clicks on the dashboard I redirect the user to another dashboard where  I have graph for CPU memory etc...and here Since the user clicked on CPU breach I want to redirect him to CPU specific graph

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @AnanthaS ,

as I said, if you want to create a drilldown from a Single Value panel, the only parameters that you must pass to the drilldown are the time tokens.

you can create your drilldown using the ui (as I hint and I already described in my previous answers)or add these rows to the Single Value panel:

<drilldown>
    <link target="_blank">/app/<your_app>/<your_seconday_dashboard>?TimeFrom=$Time.earliest$&amp;TimeTo=$Time.latest$</link>
</drilldown>

where $Time.earliest$ and $Time.latest$ are the tokens that you used for the primary dashboard.

Obviously, remember to change the drilldown option in the panel:

<option name="drilldown">all</option>

instead of "none".

Ciao.

Giuseppe

 

gcusello
SplunkTrust
SplunkTrust

Hi @AnanthaS ,

as I said:

  • create the secondary dashboard,
  • click on the three dots of your Single Value panel,
  • insert the secondary dashboard in the window,
  • eventually adding the time tokens you used for the primary dashboard (in this case, you have to add them also to the secondary dashboard
  • and you'll have your dashboard.

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...