Dashboards & Visualizations

How to enable drilldown for specific columns?

vik
Explorer

Hi guys... 

 

I am trying to enable drill down for only the first column in a stats table. Any suggestions on how can we do this ? 

I would need rest of the columns to appear normal without any links (not clickable). 

 

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

The style selector needs to be repeated for all columns apart from the first (index="0")

    <panel depends="$stayhidden$">
      <html>
        <style>
          #tableClickableColumn table tbody td[data-cell-index="1"],
          #tableClickableColumn table tbody td[data-cell-index="2"]{
            color: black !important;
          }
        </style>
      </html>
    </panel>
    <panel>
      <table id="tableClickableColumn">
        <search>
          <query>
Put your search here
          </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <condition field="first column name">
            <link target="_blank">$click.value|n$</link>
          </condition>
          <condition>
          </condition>
        </drilldown>
      </table>
    </panel>

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The style selector needs to be repeated for all columns apart from the first (index="0")

    <panel depends="$stayhidden$">
      <html>
        <style>
          #tableClickableColumn table tbody td[data-cell-index="1"],
          #tableClickableColumn table tbody td[data-cell-index="2"]{
            color: black !important;
          }
        </style>
      </html>
    </panel>
    <panel>
      <table id="tableClickableColumn">
        <search>
          <query>
Put your search here
          </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <condition field="first column name">
            <link target="_blank">$click.value|n$</link>
          </condition>
          <condition>
          </condition>
        </drilldown>
      </table>
    </panel>
0 Karma

vik
Explorer

That helps! Thanks a lot

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...