Dashboards & Visualizations

How to drilldown selected choices from one multiselect input form to another multiselect input form (on another dashboard)?

shariinPH
Contributor

I have 2 dashboards say "Summary View Dashboard" and "Details Dashboard". Both dashboards have multiselect input say "Account". User could have chosen multiple choices for "Account" at the "Summary View Dashboard". I would like to find out a way to carry these selected values for "Account" from"Summary View Dashboard" when drilldown-ed to "Details Dashboard". Would really appreciate any help.

0 Karma

immortalraghava
Path Finder

Hi, you can use the drilldown tag to achieve this.

Example summary view dashboard

<drilldown>
            <link>/app/search/details_dashboard?accounts_selected=$accounts$</link>
</drilldown>

In the details dashboard, you can use the accounts variable as $accounts_selected$

gcusello
SplunkTrust
SplunkTrust

Hi shariinPH,
did you already seen the Splunk Dashboard Examples App ( https://splunkbase.splunk.com/app/1603/ )?
in this App there are some examples of tokens use cases.
Anyway, you have to pass the token to the drilldown:
if your multiselect input token is called "my_token", in the drilldown section you have to put something like this:

<drilldown>
   <link target="_blank">/app/my_app/my_secondary_form?my_token=$mytoken$</link>
</drilldown>

in this way, you pass the multi-input choices to the secondary dashboard.
Obviously, you have to manage it in the secondary dashboard, but in the Example App you can find an example of this.

Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...