Dashboards & Visualizations

How to pass 2 values at a time in a drilldown when clicking on a row in a table?

xvxt006
Contributor

Hi,

When i click on a particular cell, say If i click on number 4 in the screenshot (under 400 and next to PR511), I should have JVM=PR511 and status=400. is there a way to get both the values using click.value or something like that?

sourcetype=access_combined_wcookie JVM=PR* status >399 AND status<500 | chart count over JVM by status

alt text

Tags (1)
0 Karma

somesoni2
Revered Legend

See this link for details on what all tokens are available for drilldown from a table.
http://docs.splunk.com/Documentation/Splunk/6.2.2/Viz/PanelreferenceforSimplifiedXML#table_.28event_...

So, you would be able to use $click.name2$ for name of the click column (that will be 400) and $row.JVM$ OR $click.value$ for PR511

Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...