Dashboards & Visualizations

How do I allow drill down on only 1 of the charts in a chart overlay?

zongwei
New Member

I have a timechart overlay from my search that returns a column chart and a line chart.

I have also configured the drill down to return specifically what I want.

However, I only want the drill down to be active for the line chart, and not the column chart. Is there any way for me to disable clicking on the column chart only?

0 Karma

jvardev
Path Finder

Hi zongwei,

You can catch the field what you want. Use predefined tokens like $click.<field_name>$ to take'em.

If you want catch a value from field named foo, declare in your timechart drilldown tag. The same name field for you chart overlay in your case.

<drilldown>
  <set token="clickedFooValueToken">$row.foo$</set>
</drilldown>

Token clickedFooValueToken will content the value from clicked field foo

You can find more info:

http://docs.splunk.com/Documentation/Splunk/7.2.0/Viz/ContextualDrilldown
http://docs.splunk.com/Documentation/Splunk/7.2.0/Viz/tokens

Greetings. jvardev.

0 Karma

zongwei
New Member

Hi jvardev,

Thanks for your answer. I have managed to capture the value that I wanted.

However, what I meant was, I have a chart overlay of column chart and line chart, and I only want the line chart to be able to be clicked and drilldown. So clicking the line chart will bring me to an event, But I do not want drilldown to be activate for the column chart of my chart overlay, meaning clicking the column chart will do nothing.

Is it possible to achieve this?

Thanks, zongwei.

0 Karma

493669
Super Champion

if you don't want drilldown for column chart then add below stanza under column chart panel-

<option name="charting.drilldown">none</option>
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...