Dashboards & Visualizations

How do you link two dashboards with the same filter?

MaximeMoreau
Explorer

Hello everybody,

I want to link a dashboard (main) to others with different filters.

I already linked them, but I didn't access to them with different filters.

Here's an exemple of one of my links:

<panel>
      <single>
        <title>SACM Compliance</title>
        <search base="base2">
          <query>| where flag=1
| search $fieldBU$ AND $fieldCountry$ AND $fieldST$ AND $fieldSite$ AND $fieldHN$ AND $fieldIP$
| search $fieldSite$ | stats count(flag)</query>
        </search>
        <option name="colorMode">block</option>
        <option name="drilldown">all</option>
        <option name="rangeColors">["0x53a051","0x53a051"]</option>
        <option name="rangeValues">[400000]</option>
        <option name="refresh.display">preview</option>
        <option name="unitPosition">after</option>
        <option name="useColors">1</option>
        <option name="useThousandSeparators">0</option>
        <drilldown>
          <link target="_blank">
            <![CDATA[/app/ITAMSAM/sacmlandesk__ok?]]>
          </link>
        </drilldown>
      </single>
    </panel>

But little thing to know. In each values, I put a condition for "*" (because I need to have all values and all null values)
Exemple of one condition :

<change>
          <condition label="All">
            <set token="fieldBU">(BU=* OR NOT BU="*")</set>
          </condition>
</change>

Does someone have an idea of how to put a filter on my link to have them on my new dashboard ?

Thank you a lot,

Maxime.

1 Solution

vnravikumar
Champion

Hi @MaximeMoreau

Try by specifying in query parameter like

<drilldown>
          <link target="_blank">/app/search/secondary?selected=$row.values$</link>
</drilldown>

Where you can access the value by referring$selected$ in the second dashboard.

View solution in original post

0 Karma

siva_kumar0147
Explorer

@vnravikumar  thanks for that  and it helped a lot, but I have multiple fields . 
In that case for STATIC filters its working & coming to dynamic its reflecting the Field for Value name in the filter of linked dashboard.

Thanks in Advance.....  

0 Karma

vnravikumar
Champion

Hi @MaximeMoreau

Try by specifying in query parameter like

<drilldown>
          <link target="_blank">/app/search/secondary?selected=$row.values$</link>
</drilldown>

Where you can access the value by referring$selected$ in the second dashboard.

0 Karma

MaximeMoreau
Explorer

Hi @vnravikumar,

I tried like that :

<drilldown>
          <link target="_blank">/app/ITAMSAM/sacmlandesk__ok?selected=$row.values$</link>
 </drilldown>

But I don't know where I have to put $selected$ in the other Dashboard ?

Thanks,
Maxime.

0 Karma

vnravikumar
Champion

Hi Maxime

Where selected is a variable which you can use it in the second dashboard, Similarly you can add all the necessary token in the query paramater and use it in the second dashboard.

   <drilldown>
              <link target="_blank">/app/search/secondary?valueone=$fieldone$&amp;valuetwo=$fieldtwo$</link>
            </drilldown>

valueone, valuetwo are the variables that contains values of fieldone and fieldtwo from first dashboard and you can use it in second dashboard with $valueone$ and $valuetwo$

0 Karma

MaximeMoreau
Explorer

Perfect ! Thank you a lot !

0 Karma

vnravikumar
Champion

welcome 🙂

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...