Dashboards & Visualizations

Drilldown to new dashboard almost working !

Mahieu
Communicator

Hey guys,

I've built a very basic dashboard that has one panel.
That panel is showing the results of a basic "top" command in a pie format.
Let's say i have a search that looks like :
xxx | top myfield

I'd like to be able to click on a piece of the pie (myfield=sample_value) and be redirected to another dashboard with the myfield=sample_value" parameter in the url.
Of course, i've checked that the dashboard at http://mysplunk/app/search/second_dashboard?myfield=sample_value works just fine.

Still, i can't find a way to post this to the dashboard.

I've created the intention with the following :

<module name="ConvertToIntention">
<param name="intention">
<param name="name">addterm</param>
<param name="arg">
<param name="series">$click.value$</param>
</param>
</param>

This seems to work, i've checked by adding :

<module name="ConvertToDrilldownSearch">
<module name="JobProgressIndicator"/>
<module name="SimpleResultsHeader">
<param name="headerFormat">You havec clicked on $click.value$</param>
<param name="entityName">events</param>
</module>

And the new line shows up just fine saying :
"You have clicked on sample_value"

A link to the second dashboard (without the ConverttoIntention part) works just fine like this :

<module name="ConvertToDrilldownSearch">
<module name="ViewRedirector">
<param name="viewTarget">second_dashboard</param>
</module>
</module> 

If I'm using this ConvertToDrilldownSearch and the ConvertToIntention at the same time, Splunk takes me to :
http://mysplunk/en-US/app/search/second_dashboard?q=search%20xxxxx%22%20myfield%3D%22sample_value%22...

I've tried with
second_dashboard?myfield=sample_value
but it won't solve the problem

I'm nearly there but ... something's missing.

Has anyone got a clue on what i'm doing wrong ?

Thanks a lot in advance for your help.

Mat

Tags (2)
1 Solution

ludoz13
Path Finder

Hello guy,

Yuu just need to use this following module :




/app/dashboard_examples/form_table2?form.sourcetype=$click.value$


View solution in original post

ludoz13
Path Finder

Hello guy,

Yuu just need to use this following module :




/app/dashboard_examples/form_table2?form.sourcetype=$click.value$


Mahieu
Communicator

It works !
Thanks a lot. Another question though :
How do i open the new dashboard in another window ?

Thanks in advance

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...