Dashboards & Visualizations

How to get the value which user clicks from drill down.Not the first value in the row

john
Communicator

Hi,

I want to get the value which user clicks from drilldown.But iam not able to get that value iam getting the first value of the row which user clicked






*
False
1


<![CDATA[ |search source="C:\newlogs....." |rex field=_raw "(?\w+Exception)" |dedup Exception|table Exception,id ]]>

100
True
true
row
click1



<![CDATA[ |search source="C:\newlogs......" $exception$ |stats count ]]>


stringreplace


$click1.value2$



indexed

             <module name="JobProgressIndicator"></module>

           <module name="SimpleResultsHeader">
          <param name="entityName">results</param>
          <param name="headerFormat">Detail  on $click1.value2$</param>
        </module>
      <module name="SimpleResultsTable">
                        <param name="count">100</param>
                        <param name="displayMenu">True</param>
                        <param name="displayRowNumbers">true</param>
                        <param name="drilldown">row</param>
                       <param name="drilldownPrefix">click2</param>                           
    </module>
 </module>




I have used "click.value2" for getting value from drilldown which user clicked but its still returning the value of first coulmn of first row.

Please help

Tags (1)
0 Karma

Savva
Engager

Hi All. I have the same question? but i'd like to make it not in SimpleResultsTable, but in SideView's Table.
I need to drill with searchterms in exactly clicked cell value and its column name.

0 Karma

Ayn
Legend

"cell" is not a valid value for the "drilldown" parameter in SimpleResultsTable. You should set it to all in order to have the row and column value (value2) passed along in the drilldown.

john
Communicator

Thanks ayn now oly i have noticed that you have said the same thing

0 Karma

Ayn
Legend

...which is what I was suggested... 😉

Anyway, great that it works!

0 Karma

john
Communicator

I find out the problem use 'all' instead of row for drilldown parameter.

0 Karma

john
Communicator

I have tried with both the possibilities but still iam getting the value of first column of the row.What could be the prblm

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...