Dashboards & Visualizations

How to pass 2 values at a time in a drilldown when clicking on a row in a table?

xvxt006
Contributor

Hi,

When i click on a particular cell, say If i click on number 4 in the screenshot (under 400 and next to PR511), I should have JVM=PR511 and status=400. is there a way to get both the values using click.value or something like that?

sourcetype=access_combined_wcookie JVM=PR* status >399 AND status<500 | chart count over JVM by status

alt text

Tags (1)
0 Karma

somesoni2
Revered Legend

See this link for details on what all tokens are available for drilldown from a table.
http://docs.splunk.com/Documentation/Splunk/6.2.2/Viz/PanelreferenceforSimplifiedXML#table_.28event_...

So, you would be able to use $click.name2$ for name of the click column (that will be 400) and $row.JVM$ OR $click.value$ for PR511

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...