Dashboards & Visualizations

Drilldown to another dashboard's dropdown static options

JIrojas
Explorer

I have been trying to link with drilldown a panel from one dashboard to open another with a static option from a dropdown form selected. The problem is, I can't manage to create a parameter that fits both the name and the value of said static option.

 

What I basically need is; when clicking the VNF'S Down panel (first image below), it has to open the other Dashboard (second image below) with a drilldown static option selected (in this case, VNF), if it is possible.

Dashboard 1.png

 

Dropdown static options.png

Thanks!

Labels (3)
0 Karma
1 Solution

Marco
Communicator

 

<fieldset submitButton="false">
<input type="dropdown" token="Device_Type_Token" searchWhenChanged="true">
      <label>Device Type</label>
      <choice value="All Devices">All Devices</choice>
      <choice value="Switches">Switches</choice>
      <choice value="Hypervisors">Hypervisors</choice>
      <choice value="Pinged IP">Pinged IP</choice>
      <choice value="VNF">VNF</choice>
      <change>
        <condition value="All Devices">
          <link>All_Devices_Dashboard</link>
        </condition>
        <condition value="Switches">
          <link>Switches_Dashboard</link>
        </condition>
        <condition value="Hypervisors">
          <link>Hypervisors_dashboard</link>
        </condition>
        <condition value="Pinged IP">
          <link>Pinged_IP_Dashboard</link>
        </condition>
        <condition value="VNF">
          <link>VNF_Dashboard</link>
        </condition>
      </change>
    </input>
</fieldset>

 

Insert the dashboard name in the <link></link> fields. No.XML extension is needed

 

-Marco

 

View solution in original post

0 Karma

bowesmana
SplunkTrust
SplunkTrust

Here are two dashboards, with the first linking to the second and passing the type/state and count to the second dashboard. 

The link element has form.xxx with the value of the field attribute it wants selected.

Dashboard 1

<dashboard>
  <label>VFNs</label>
  <search id="base">
    <query>| makeresults
| eval VFNs_Up=1297, VFNs_Down=4
| fields VFNs_*</query>
  </search>
  <row>
    <panel>
      <title>VFNs UP</title>
      <single>
        <search base="base">
          <query>
| eval Item="VFN", State="Up"
| rename VFNs_Up as Count
| table Count Item State
          </query>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="rangeColors">["0x53a051","0x53a051"]</option>
        <option name="rangeValues">[0]</option>
        <option name="useColors">1</option>
        <drilldown>
          <link target="_blank">vfns2?form.device_type=$row.Item$&amp;form.device_state=$row.State$&amp;device_count=$row.Count$</link>
        </drilldown>
      </single>
    </panel>
    <panel>
      <title>VFNs Down</title>
      <single>
        <search base="base">
          <query>
| eval Item="VFN", State="Down"
| rename VFNs_Down as Count
| table Count Item State
          </query>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="rangeColors">["0xdc4e41","0xdc4e41"]</option>
        <option name="rangeValues">[0]</option>
        <option name="useColors">1</option>
        <drilldown>
          <link target="_blank">vfns2?form.device_type=$row.Item$&amp;form.device_state=$row.State$&amp;device_count=$row.Count$</link>
        </drilldown>
      </single>
    </panel>
  </row>
</dashboard>

Dashboard 2

<form>
  <label>VFNS2</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="device_type" searchWhenChanged="true">
      <label>Device Type</label>
      <choice value="switches">Switches</choice>
      <choice value="hypervisors">Hypervisors</choice>
      <choice value="pip">Pinged IP</choice>
      <choice value="vfns">VFNs</choice>
    </input>
    <input type="dropdown" token="device_state">
      <label>State</label>
      <choice value="Up">Up</choice>
      <choice value="Down">Down</choice>
    </input>
  </fieldset>
  <row depends="$device_type$,$device_state$">
    <panel>
      <title>VFNs Currently in the State $device_state$</title>
      <html>
        <h1>$device_count$</h1>
      </html>
    </panel>
  </row>
</form>

 

0 Karma

Marco
Communicator

 

<fieldset submitButton="false">
<input type="dropdown" token="Device_Type_Token" searchWhenChanged="true">
      <label>Device Type</label>
      <choice value="All Devices">All Devices</choice>
      <choice value="Switches">Switches</choice>
      <choice value="Hypervisors">Hypervisors</choice>
      <choice value="Pinged IP">Pinged IP</choice>
      <choice value="VNF">VNF</choice>
      <change>
        <condition value="All Devices">
          <link>All_Devices_Dashboard</link>
        </condition>
        <condition value="Switches">
          <link>Switches_Dashboard</link>
        </condition>
        <condition value="Hypervisors">
          <link>Hypervisors_dashboard</link>
        </condition>
        <condition value="Pinged IP">
          <link>Pinged_IP_Dashboard</link>
        </condition>
        <condition value="VNF">
          <link>VNF_Dashboard</link>
        </condition>
      </change>
    </input>
</fieldset>

 

Insert the dashboard name in the <link></link> fields. No.XML extension is needed

 

-Marco

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Your drilldown can pass parameters on the url to set tokens (of dropdowns) in the target dashboard (see this earlier answer https://community.splunk.com/t5/Dashboards-Visualizations/Transfer-tokens-from-dashboard-to-dashboar...)

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...