Dashboards & Visualizations

How do I drilldown each column to each sources?

appleman
Contributor

Hello,

I created a simple dashbaord, and am trying to set drilldown for each columns.
But the thing is, each column needs to drilldown to different searches.
Like as shown below, if I click "A", then it goes to sourcetype=A search, on the other hand, if I click "i", then it goes to sourcetype=i search.
Is it possible to do this?

Thanks in advance.


以下のダッシュボードのテーブルから、それぞれのカラムをクリックすると、それぞれ違うサーチ文にドリルダウンさせるということをしたいのですが、どのように設定すればいいのかご教示下さい。

alt text

0 Karma
1 Solution

melonman
Motivator

You need to add tag for yout result table, and spedify the link (or next view) with the clicked value.

 <drilldown>
  <link>
     /app/YOUR_APP/your_view?form.sourcetype=$click.value$
   </link>
 </drilldown> 

you really need to check the document to see what is passed by clicking on the result table.

View solution in original post

0 Karma

melonman
Motivator

You need to add tag for yout result table, and spedify the link (or next view) with the clicked value.

 <drilldown>
  <link>
     /app/YOUR_APP/your_view?form.sourcetype=$click.value$
   </link>
 </drilldown> 

you really need to check the document to see what is passed by clicking on the result table.

0 Karma

appleman
Contributor

Thank you, but I've already read this before, and couldn't find an answer. Each type needs to go different searches or dashboards, but I don't know how to do it.

0 Karma

cwl
Contributor
0 Karma

appleman
Contributor

It just goes to this page.

0 Karma

cwl
Contributor
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...