I'm pretty new to this and was wondering how to create a graph that can drill down to another graph?
Thu, 28 Jan 2016 16:40:45 GMT title="Edwin Tong vs WP" link=http://forums.testing.com/this-isjust-a-tetsing/tong-vs-wp-11111.html description="Mr Tong said: "Now,
See this run anywhere example
<dashboard> <label>DrilldownChart</label> <row> <panel> <chart> <title>SourceTypeDistribution</title> <search> <query>index=_internal earliest=-15m | stats count by sourcetype</query> <earliest>0</earliest> </search> <option name="charting.chart">pie</option> <option name="charting.legend.placement">right</option> <option name="charting.drilldown">all</option> <drilldown> <link> <![CDATA[ /app/search/search?earliest=$earliest$&latest=$latest$&q=search%20index%3D_internal%20sourcetype%3D$row.sourcetype$%20%7C%20timechart%20count&display.page.search.tab=visualizations&display.general.type=visualizations ]]> </link> </drilldown> </chart> </panel> </row> </dashboard>
Thanks somesoni for your assistance. Though im not sure where to insert it in ? I have created a new dashboard for the code.
Also, separate question:
1. can the patterns be added as a panel?
2. can the below be further broken down into fields for each word ?
I guess i went about another route, filtering by title instead.
I'm wondering if its possible to have page 2 display a graph instead of the raw search.
For example: when i click on "tom clancy's the division", it will show another drilled down graph instead of a raw search.
Your sample event appears to be in a format Splunk should be parsing automatically into 'title', 'link', and 'description' fields. What are you seeing?