I have a dynamic dashboard named Departments with a dropdown box that lists departments of a factory. Elements on the page have drill downs that take you to another dynamic dashboard named Machine Details. My goal is to have a user select a department from the dropdown menu where they can then drill down to a Machine Details dashboard. When they are on the Machine Details dashboard, the user should see a drop down box that displays only the machines in the department they chose on the Department Details dashboard. Example: Department A uses machines 1, 2, and 3. Department B uses machines 4, 5, 6. When the user selects Department A from Department Details' dropdown box and drills down to Machine Details dashboard, the dropdown box only shows option 1, 2, 3 (as opposed to 1, 2, 3, 4, 5, 6 which is how I have it now)
Please let me know if this is possible and good instructions on how to accomplish this as I am very new to Splunk. Thank you very much in advance!!
yes, it's possible:
in the drilldows parameters of the main dashboard you have to insert a value to use in the secondary dashboard searches to filter Machines: e.g. if in the logs of the secondary search there's a field called "Department", you have to insert the department value (or something related to) in the main dashboard's drilldown.