How to pass multiple tokens and a time range picker token to another dashboard via drilldown?

[zd00191]

Hello. I have a dashboard with the following input tokens.

<form>
  <label>System/Platform Job Completion Report</label>
  <description/>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" searchWhenChanged="true" token="Time">
      <default>
        <earliestTime>-12h</earliestTime>
        <latestTime>now</latestTime>
      </default>
    </input>
    <input type="dropdown" token="System" searchWhenChanged="true">
      <label>System</label>
      <choice value="*">All</choice>
      <default>*</default>
      <populatingSearch earliest="$Time.earliest$" latest="$Time.latest$" fieldForValue="System" fieldForLabel="System">
        <![CDATA[ index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" |stats count by System ]]>
      </populatingSearch>
    </input>
  </fieldset>

I want to pass the System token and the time range picker token to another dashboard called job_monitor. How do I pass the time range selected and the system via drill down? The system will be a click.value.

[somesoni2 · Accepted solution]

Both the time range picket values (earliest and latest) and dropdown's selected value will be available with direct token name e.g. $System$ and $Time.earliest$/$Time.latest$ and can passed as it is to a drilldown URL. The only thing you need to take care would to assign the token name which is available in the next dashboard.

See Splunk documentation for more details. http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#Drilldown_eleme...

<drilldown>
  <link>
  <![CDATA[
/app/search/simple_xml_form?form.SystemIn2ndDashboard=$System$&earliest=$Time.earliest$&latest=$Time.latest$
  ]]>
  </link>
</drilldown>

[zd00191]

If I wanted to grab a column name from a table and the system token and the time, how would that look? Would it look like this?

    <link>
      <![CDATA[/app/ko_autosys/error_list?form.status=$click.value$&amp;System=$jSystem$&earliest=$Time.earliest$&latest=$Time.latest$]]>
    </link>
  </drilldown>

[somesoni2]

Yes.
Please note the format of the query string while drilldown

/path/dashboardName?destinationcontrolORtoken=$tokenTobePassed$