Dashboards & Visualizations

How to pass value in token after clicking on bubble/piechart MAP

abhishekkalokhe
Explorer

i want to pass value in token, from the point we select on the MAP.
I am using geostats command to generate results.

Eg, if we click on green bubble on MAP, i want to pass the value "Blue Water" in my token.

abhishekkalokhe_0-1592939014006.png

I tried all the option from custom drilldown, but none of them worked.

Labels (6)
Tags (1)
0 Karma
1 Solution

niketn
Legend

Fixed slices means each Location on map must show same no. of series for example Type of HTTP methods as GET and POST values. However, like I mentioned you can have different number of slices as per screenshot attached and sometimes only single circle with no slice. So you may have to try out the Map+ viz.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

niketn
Legend

@abhishekkalokhe this would be a limitation of built in Cluster Map viz, where you can not fetch Split field values if there are multiple slices of the pie for the same location. i.e. if you use $click.name$ or $click.value$ , it would work for single slice pie, but for pie with multiple slices it will return only the first row data.
If you had fixed number of slices, you could still be able to fetch the details. But looking at the screenshot you don’t seem to have one. Please try out Map+ custom visualization and see if fits the need.https://splunkbase.splunk.com/app/3124/

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

abhishekkalokhe
Explorer

@niketn what do you mean by fixed no of slices.
if we can pass value if slices are fixed , then may be i will tweak my query a little bit do that.

0 Karma

niketn
Legend

Fixed slices means each Location on map must show same no. of series for example Type of HTTP methods as GET and POST values. However, like I mentioned you can have different number of slices as per screenshot attached and sometimes only single circle with no slice. So you may have to try out the Map+ viz.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...