Dashboards & Visualizations

How do I drilldown each column to each sources?

appleman
Contributor

Hello,

I created a simple dashbaord, and am trying to set drilldown for each columns.
But the thing is, each column needs to drilldown to different searches.
Like as shown below, if I click "A", then it goes to sourcetype=A search, on the other hand, if I click "i", then it goes to sourcetype=i search.
Is it possible to do this?

Thanks in advance.


以下のダッシュボードのテーブルから、それぞれのカラムをクリックすると、それぞれ違うサーチ文にドリルダウンさせるということをしたいのですが、どのように設定すればいいのかご教示下さい。

alt text

0 Karma
1 Solution

melonman
Motivator

You need to add tag for yout result table, and spedify the link (or next view) with the clicked value.

 <drilldown>
  <link>
     /app/YOUR_APP/your_view?form.sourcetype=$click.value$
   </link>
 </drilldown> 

you really need to check the document to see what is passed by clicking on the result table.

View solution in original post

0 Karma

melonman
Motivator

You need to add tag for yout result table, and spedify the link (or next view) with the clicked value.

 <drilldown>
  <link>
     /app/YOUR_APP/your_view?form.sourcetype=$click.value$
   </link>
 </drilldown> 

you really need to check the document to see what is passed by clicking on the result table.

0 Karma

appleman
Contributor

Thank you, but I've already read this before, and couldn't find an answer. Each type needs to go different searches or dashboards, but I don't know how to do it.

0 Karma

cwl
Contributor
0 Karma

appleman
Contributor

It just goes to this page.

0 Karma

cwl
Contributor
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...