Dashboards & Visualizations

How do you link two dashboards with the same filter?

MaximeMoreau
Explorer

Hello everybody,

I want to link a dashboard (main) to others with different filters.

I already linked them, but I didn't access to them with different filters.

Here's an exemple of one of my links:

<panel>
      <single>
        <title>SACM Compliance</title>
        <search base="base2">
          <query>| where flag=1
| search $fieldBU$ AND $fieldCountry$ AND $fieldST$ AND $fieldSite$ AND $fieldHN$ AND $fieldIP$
| search $fieldSite$ | stats count(flag)</query>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="rangeColors">["0x53a051","0x53a051"]</option>
        <option name="rangeValues">[400000]</option>
        <option name="refresh.display">preview</option>
        <option name="unitPosition">after</option>
        <option name="useColors">1</option>
        <option name="useThousandSeparators">0</option>
        <drilldown>
          <link target="_blank">
            <![CDATA[/app/ITAMSAM/sacmlandesk__ok?]]>
          </link>
        </drilldown>
      </single>
    </panel>

But little thing to know. In each values, I put a condition for "*" (because I need to have all values and all null values)
Exemple of one condition :

<change>
          <condition label="All">
            <set token="fieldBU">(BU=* OR NOT BU="*")</set>
          </condition>
</change>

Does someone have an idea of how to put a filter on my link to have them on my new dashboard ?

Thank you a lot,

Maxime.

1 Solution

vnravikumar
Champion

Hi @MaximeMoreau

Try by specifying in query parameter like

<drilldown>
          <link target="_blank">/app/search/secondary?selected=$row.values$</link>
</drilldown>

Where you can access the value by referring$selected$ in the second dashboard.

View solution in original post

0 Karma

siva_kumar0147
Explorer

@vnravikumar  thanks for that  and it helped a lot, but I have multiple fields . 
In that case for STATIC filters its working & coming to dynamic its reflecting the Field for Value name in the filter of linked dashboard.

Thanks in Advance.....  

0 Karma

vnravikumar
Champion

Hi @MaximeMoreau

Try by specifying in query parameter like

<drilldown>
          <link target="_blank">/app/search/secondary?selected=$row.values$</link>
</drilldown>

Where you can access the value by referring$selected$ in the second dashboard.

0 Karma

MaximeMoreau
Explorer

Hi @vnravikumar,

I tried like that :

<drilldown>
          <link target="_blank">/app/ITAMSAM/sacmlandesk__ok?selected=$row.values$</link>
 </drilldown>

But I don't know where I have to put $selected$ in the other Dashboard ?

Thanks,
Maxime.

0 Karma

vnravikumar
Champion

Hi Maxime

Where selected is a variable which you can use it in the second dashboard, Similarly you can add all the necessary token in the query paramater and use it in the second dashboard.

   <drilldown>
              <link target="_blank">/app/search/secondary?valueone=$fieldone$&amp;valuetwo=$fieldtwo$</link>
            </drilldown>

valueone, valuetwo are the variables that contains values of fieldone and fieldtwo from first dashboard and you can use it in second dashboard with $valueone$ and $valuetwo$

0 Karma

MaximeMoreau
Explorer

Perfect ! Thank you a lot !

0 Karma

vnravikumar
Champion

welcome 🙂

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...