Dashboards & Visualizations

Drilldown to new dashboard almost working !

Mahieu
Communicator

Hey guys,

I've built a very basic dashboard that has one panel.
That panel is showing the results of a basic "top" command in a pie format.
Let's say i have a search that looks like :
xxx | top myfield

I'd like to be able to click on a piece of the pie (myfield=sample_value) and be redirected to another dashboard with the myfield=sample_value" parameter in the url.
Of course, i've checked that the dashboard at http://mysplunk/app/search/second_dashboard?myfield=sample_value works just fine.

Still, i can't find a way to post this to the dashboard.

I've created the intention with the following :

<module name="ConvertToIntention">
<param name="intention">
<param name="name">addterm</param>
<param name="arg">
<param name="series">$click.value$</param>
</param>
</param>

This seems to work, i've checked by adding :

<module name="ConvertToDrilldownSearch">
<module name="JobProgressIndicator"/>
<module name="SimpleResultsHeader">
<param name="headerFormat">You havec clicked on $click.value$</param>
<param name="entityName">events</param>
</module>

And the new line shows up just fine saying :
"You have clicked on sample_value"

A link to the second dashboard (without the ConverttoIntention part) works just fine like this :

<module name="ConvertToDrilldownSearch">
<module name="ViewRedirector">
<param name="viewTarget">second_dashboard</param>
</module>
</module> 

If I'm using this ConvertToDrilldownSearch and the ConvertToIntention at the same time, Splunk takes me to :
http://mysplunk/en-US/app/search/second_dashboard?q=search%20xxxxx%22%20myfield%3D%22sample_value%22...

I've tried with
second_dashboard?myfield=sample_value
but it won't solve the problem

I'm nearly there but ... something's missing.

Has anyone got a clue on what i'm doing wrong ?

Thanks a lot in advance for your help.

Mat

Tags (2)
1 Solution

ludoz13
Path Finder

Hello guy,

Yuu just need to use this following module :




/app/dashboard_examples/form_table2?form.sourcetype=$click.value$


View solution in original post

ludoz13
Path Finder

Hello guy,

Yuu just need to use this following module :




/app/dashboard_examples/form_table2?form.sourcetype=$click.value$


Mahieu
Communicator

It works !
Thanks a lot. Another question though :
How do i open the new dashboard in another window ?

Thanks in advance

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...