Dashboards & Visualizations

How do I pass one dashboard date/time picker through drilldown to a second dashboard?

mcrawford44
Communicator

I have the following drilldown configuration in a dashbaord;

        <drilldown target="My New Window">
          <link field="user">
            <![CDATA[https://foo.com/en-US/app/appname/dashboardname?form.egress_type=$form.egress_type$&form.userid=$click.value2$&form.cdi_business.tok=$row.Business$]]>
          </link>
        </drilldown>

I've tried several examples. The best result of which just gives me an error of "invalid earliest_time".

I'd like the user to be able to pick a date range, click a drill down item from that date range, and have it carry over to the dashboard. I'd prefer not to include 'earliest=$token$' in the search string itself, and to use the global picker.

Thanks in advance.

dmitrynt
Engager

Hey Guys how do i perform same thing inside Dashboard Studio?

 

Thanks

0 Karma

AsmaF2025
Explorer

Did you get answer to this ?
Can u help with resolution you obtained?

0 Karma

sundareshr
Legend

You need to specify the name of the timepicker in the URL. Try this RA sample, see if this will work for your (it calls itself)

<form>
  <label></label>
  <fieldset submitButton="false">
    <input type="time" token="t">
      <label>Tiem</label>
      <default>
        <earliest>-60m@m</earliest>
        <latest>now</latest>
      </default>
    </input>
  </fieldset>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal | head 1</query>
          <earliest>$t.earliest$</earliest>
          <latest>$t.latest$</latest>
        </search>
        <option name="rowNumbers">true</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">row</option>
        <option name="count">10</option>
        <drilldown target="My New Window">
          <link>
            <![CDATA[http://localhost:8000/en-US/app/test/test_time_chart?form.t.earliest=$t.earliest$&form.t.latest=now]]>
          </link>
        </drilldown>
        <option name="wrap">true</option>
      </table>
    </panel>
  </row>
</form>

somesoni2
Revered Legend

Can you share your full dashboard xml OR at least the full panel xml where this drilldown exists?

0 Karma

mcrawford44
Communicator
<panel>
  <table>
    <title>Top Users</title>
    <search>
      <query>foo | table userid Business</query>
    </search>
    <option name="count">10</option>
    <drilldown target="My New Window">
      <link field="user">
        <![CDATA[https://foo.com/en-US/app/appname/dashboardname?form.egress_type=$form.egress_type$&form.userid=$click.value2$&form.cdi_business.tok=$row.Business$]]>
      </link>
    </drilldown>
    <option name="wrap">true</option>
    <option name="rowNumbers">false</option>
    <option name="dataOverlayMode">none</option>
    <option name="drilldown">cell</option>
  </table>
</panel>

I'm not sure how this is relevant considering the mechanism would be identical between all implementations. Documentation says to use earliest/latest as the tokens ; http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/PanelreferenceforSimplifiedXML#Drilldown_event...

Like this;

<![CDATA[https://foo.com/en-US/app/appname/dashboardname?form.egress_type=$form.egress_type$&form.userid=$click.value2$&form.cdi_business.tok=$row.Business$&earliest=$earliest$&latest=$latest$]]>

However, that appears to do nothing at all.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...