Dashboards & Visualizations

How do you link two dashboards with the same filter?

MaximeMoreau
Explorer

Hello everybody,

I want to link a dashboard (main) to others with different filters.

I already linked them, but I didn't access to them with different filters.

Here's an exemple of one of my links:

<panel>
      <single>
        <title>SACM Compliance</title>
        <search base="base2">
          <query>| where flag=1
| search $fieldBU$ AND $fieldCountry$ AND $fieldST$ AND $fieldSite$ AND $fieldHN$ AND $fieldIP$
| search $fieldSite$ | stats count(flag)</query>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="rangeColors">["0x53a051","0x53a051"]</option>
        <option name="rangeValues">[400000]</option>
        <option name="refresh.display">preview</option>
        <option name="unitPosition">after</option>
        <option name="useColors">1</option>
        <option name="useThousandSeparators">0</option>
        <drilldown>
          <link target="_blank">
            <![CDATA[/app/ITAMSAM/sacmlandesk__ok?]]>
          </link>
        </drilldown>
      </single>
    </panel>

But little thing to know. In each values, I put a condition for "*" (because I need to have all values and all null values)
Exemple of one condition :

<change>
          <condition label="All">
            <set token="fieldBU">(BU=* OR NOT BU="*")</set>
          </condition>
</change>

Does someone have an idea of how to put a filter on my link to have them on my new dashboard ?

Thank you a lot,

Maxime.

1 Solution

vnravikumar
Champion

Hi @MaximeMoreau

Try by specifying in query parameter like

<drilldown>
          <link target="_blank">/app/search/secondary?selected=$row.values$</link>
</drilldown>

Where you can access the value by referring$selected$ in the second dashboard.

View solution in original post

0 Karma

siva_kumar0147
Explorer

@vnravikumar  thanks for that  and it helped a lot, but I have multiple fields . 
In that case for STATIC filters its working & coming to dynamic its reflecting the Field for Value name in the filter of linked dashboard.

Thanks in Advance.....  

0 Karma

vnravikumar
Champion

Hi @MaximeMoreau

Try by specifying in query parameter like

<drilldown>
          <link target="_blank">/app/search/secondary?selected=$row.values$</link>
</drilldown>

Where you can access the value by referring$selected$ in the second dashboard.

0 Karma

MaximeMoreau
Explorer

Hi @vnravikumar,

I tried like that :

<drilldown>
          <link target="_blank">/app/ITAMSAM/sacmlandesk__ok?selected=$row.values$</link>
 </drilldown>

But I don't know where I have to put $selected$ in the other Dashboard ?

Thanks,
Maxime.

0 Karma

vnravikumar
Champion

Hi Maxime

Where selected is a variable which you can use it in the second dashboard, Similarly you can add all the necessary token in the query paramater and use it in the second dashboard.

   <drilldown>
              <link target="_blank">/app/search/secondary?valueone=$fieldone$&amp;valuetwo=$fieldtwo$</link>
            </drilldown>

valueone, valuetwo are the variables that contains values of fieldone and fieldtwo from first dashboard and you can use it in second dashboard with $valueone$ and $valuetwo$

0 Karma

MaximeMoreau
Explorer

Perfect ! Thank you a lot !

0 Karma

vnravikumar
Champion

welcome 🙂

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...