I've built a very basic dashboard that has one panel.
That panel is showing the results of a basic "top" command in a pie format.
Let's say i have a search that looks like :
xxx | top myfield
I'd like to be able to click on a piece of the pie (myfield=samplevalue) and be redirected to another dashboard with the myfield=samplevalue" parameter in the url.
Of course, i've checked that the dashboard at http://mysplunk/app/search/second_dashboard?myfield=sample_value works just fine.
Still, i can't find a way to post this to the dashboard.
I've created the intention with the following :
<module name="ConvertToIntention"> <param name="intention"> <param name="name">addterm</param> <param name="arg"> <param name="series">$click.value$</param> </param> </param>
This seems to work, i've checked by adding :
<module name="ConvertToDrilldownSearch"> <module name="JobProgressIndicator"/> <module name="SimpleResultsHeader"> <param name="headerFormat">You havec clicked on $click.value$</param> <param name="entityName">events</param> </module>
And the new line shows up just fine saying :
"You have clicked on sample_value"
A link to the second dashboard (without the ConverttoIntention part) works just fine like this :
<module name="ConvertToDrilldownSearch"> <module name="ViewRedirector"> <param name="viewTarget">second_dashboard</param> </module> </module>
If I'm using this ConvertToDrilldownSearch and the ConvertToIntention at the same time, Splunk takes me to :
I've tried with
I'm nearly there but ... something's missing.
Has anyone got a clue on what i'm doing wrong ?
Thanks a lot in advance for your help.