Dashboards & Visualizations
×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
Solved! Jump to solution

How to pass down token base on row click

tungpx
Explorer
‎07-03-2024 01:17 AM

Hello, 

I have a table in a dashboard like so 

User ID1 ID2
A ABC 123
B DEF 456
C GHJ 789

 

I have set a dilldown token like so

<set token="id1">$row.ID1$</set>
<set token="id1">$row.ID1$</set>

I have a below table that I want to pass these token down. For example, when I click at ABC at ID1, it will pass the token id1 aka value "ABC" to below query, when I click at 456 at ID2  it will pass the token id2 aka value "456" to below query. 

The query will be 

index=myindex $id1$  (if I click on a value in ID1 column)

or

index=myindex $id2$ (if I click on a value in ID2 column)

I push in the right direction would be very appriciated. 

Thank you

Labels (3)
0 Karma
Reply
1 Solution
Solved! Jump to solution
Solution

renjith_nair
Legend
‎07-03-2024 07:14 AM

@tungpx 
Just assign the $click.value2$ to your token on drilldown.

Here is a run anywhere example

<dashboard version="1.1" theme="light">
  <label>Table DrillDown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>|makeresults
| eval user="A B C"
| makemv user
| mvexpand user
| streamstats count
| eval ID1=user.count
| eval ID2=user.count.0
| fields - _time</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <set token="token_value">$click.value2$</set>
        </drilldown>
      </table>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <h2> index=myindex <b> <font color="red"> ID=$token_value$ </font> </b></h2>
      </html>
    </panel>
  </row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

Reply
Solved! Jump to solution
Solution

renjith_nair
Legend
‎07-03-2024 07:14 AM

@tungpx 
Just assign the $click.value2$ to your token on drilldown.

Here is a run anywhere example

<dashboard version="1.1" theme="light">
  <label>Table DrillDown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>|makeresults
| eval user="A B C"
| makemv user
| mvexpand user
| streamstats count
| eval ID1=user.count
| eval ID2=user.count.0
| fields - _time</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <set token="token_value">$click.value2$</set>
        </drilldown>
      </table>
    </panel>
  </row>
  <row>
    <panel>
      <html>
        <h2> index=myindex <b> <font color="red"> ID=$token_value$ </font> </b></h2>
      </html>
    </panel>
  </row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂
Reply
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...