Dashboards & Visualizations

How do I insert the value selected through drill down into the choice value of multi-selection?

silverKi
Path Finder

Below is my dashboard XMLcode. The behavior I want to implement is to have the user's selection of values ​​in the table's columns automatically enter the multi-selection input. I don't know what to do.

I want to make this... 
Does anybody know what can I to do..??? Pleasee Help..me..... : ((((

silverKi_0-1717986851488.png

 

silverKi_1-1717986956005.png

 



<form version="1.1" theme="dark">
<label>Sales DashBoard</label>
<fieldset submitButton="true" autoRun="false">
<input type="time" token="globalTime" searchWhenChanged="true">
<label>Select Time Range</label>
<default>
<earliest>0</earliest>
<latest></latest>
</default>
</input>
<input type="text" token="country" searchWhenChanged="true">
<label>select Country</label>
<default>*</default>
</input>
<input type="multiselect" token="client_token">
<label>client_token</label>
<choice value="*">ALL</choice>
<prefix>(</prefix>
<suffix>)</suffix>
<valuePrefix>clientip="</valuePrefix>
<valueSuffix>"</valueSuffix>
<delimiter> OR </delimiter>
<fieldForLabel>clientip</fieldForLabel>
<fieldForValue>clientip</fieldForValue>
<search>
<query>index=main | stats count by clientip</query>
</search>
<default>*</default>
</input>
<input type="multiselect" token="field1" searchWhenChanged="true">
<label>field1 $clicked_value$</label>
<choice value="*">all</choice>
<choice value="clicked_value">choice</choice>
<default>*</default>
<initialValue>*</initialValue>
<fieldForLabel>products</fieldForLabel>
<fieldForValue>products</fieldForValue>
<search>
<query>| index=main productName=$clicked_value$
| stats count by productName</query>
</search>
<delimiter> </delimiter>
</input>
<input type="text" token="input_02" searchWhenChanged="true">
<label></label>
<default>$clicked_value$</default>
<initialValue>$clicked_value$</initialValue>
</input>
</fieldset>
<row>
<panel>
<title>test demo</title>
<table>
<title>셀트리온 과제임 $clicked_value$</title>
<search>
<query>index=main sourcetype="access*" action=purchase $client_token$
| stats values(productName) as products by clientip</query>
<earliest>$globalTime.earliest$</earliest>
<latest>$globalTime.latest$</latest>
</search>
<option name="drilldown">cell</option>
<format type="color" field="clientips">
<colorPalette type="minMidMax" maxColor="#118832" minColor="#FFFFFF"></colorPalette>
<scale type="minMidMax"></scale>
</format>
<format type="number" field="clientips"></format>
<drilldown>
<set token="clicked_value">$click.value2$</set>
</drilldown>
</table>
</panel>
</row>
<row>
<panel>
<title>Actual Purchase Rate</title>
<single>
<title>transition from shopping cart to actual purchase</title>
<search>
<query>index=main sourcetype="access_combined_wcookie" status=200 action IN(addtocart, purchase)
| iplocation clientip
| search Country="$country$"
| eval action_type=if(action="addtocart", "cart", if(action="purchase", "purchase", "other"))
| stats count(eval(action_type="cart")) as cart_count count(eval(action_type="purchase")) as purchase_count
| eval rate=round(purchase_count*100/cart_count, 2)
| table rate</query>
<earliest>$globalTime.earliest$</earliest>
<latest>$globalTime.latest$</latest>
</search>
<option name="colorMode">block</option>
<option name="drilldown">none</option>
<option name="numberPrecision">0.00</option>
<option name="rangeColors">["0xd41f1f","0xd94e17","0xf8be34","0x1182f3","0x118832"]</option>
<option name="rangeValues">[60,70,85,90]</option>
<option name="refresh.display">progressbar</option>
<option name="useColors">1</option>
</single>
</panel>..</form>

Labels (4)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...