Dashboards & Visualizations

How do I drilldown each column to each sources?

appleman
Contributor

Hello,

I created a simple dashbaord, and am trying to set drilldown for each columns.
But the thing is, each column needs to drilldown to different searches.
Like as shown below, if I click "A", then it goes to sourcetype=A search, on the other hand, if I click "i", then it goes to sourcetype=i search.
Is it possible to do this?

Thanks in advance.


以下のダッシュボードのテーブルから、それぞれのカラムをクリックすると、それぞれ違うサーチ文にドリルダウンさせるということをしたいのですが、どのように設定すればいいのかご教示下さい。

alt text

0 Karma
1 Solution

melonman
Motivator

You need to add tag for yout result table, and spedify the link (or next view) with the clicked value.

 <drilldown>
  <link>
     /app/YOUR_APP/your_view?form.sourcetype=$click.value$
   </link>
 </drilldown> 

you really need to check the document to see what is passed by clicking on the result table.

View solution in original post

0 Karma

melonman
Motivator

You need to add tag for yout result table, and spedify the link (or next view) with the clicked value.

 <drilldown>
  <link>
     /app/YOUR_APP/your_view?form.sourcetype=$click.value$
   </link>
 </drilldown> 

you really need to check the document to see what is passed by clicking on the result table.

0 Karma

appleman
Contributor

Thank you, but I've already read this before, and couldn't find an answer. Each type needs to go different searches or dashboards, but I don't know how to do it.

0 Karma

cwl
Contributor
0 Karma

appleman
Contributor

It just goes to this page.

0 Karma

cwl
Contributor
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...