Dashboards & Visualizations

How to select multiple click.values in 1 table drill down?

bobendorfer
New Member

I am trying select multiple rows in a table using a drill down to populate another search panel. I have not been able to identify an answer on how to allow multiple click.values on a single table. Any ideas?

basic search:
index=mainsearch sourcetype=minniesearch
| fields thisone
| table thisone count
| sort -count

XML
drilldown
set token="word1">$click.value$
set token="word2">$click.value$
set token="word3">$click.value$
/drilldown

Passing tokens to this panel:

index=mainsearch sourcetype=minniesearch $word1$ $word2$ $word3$ 
0 Karma

tiagofbmm
Influencer

Hi

I believe you need to move to JavaScript to control that behaviour.
You can create a variable and then add each clicked value into that.

var drill = []
table.on("click", function(e) {
drill.push(e.data['row.value']);
}

In the end you;ll have the three values and you just need the other search you use to be reloaded using the search manager of that other panel (let's say its called panel_search)

panel_search.startSearch();

0 Karma

deepashri_123
Motivator

Hey bobendorfer,

You can use parameters as click.value, click.value2 and so on.
Hope this helps!!

0 Karma

bobendorfer
New Member

deepashri- the suggestion to set as click.value, click.value2 and so on does not work because they are not individual parameters.

I defined the below XML which returns the same result for click.value and click.value2.

Example: Select up to 3 - $word1$ $word2$ and the result was... Select up to 3 - reset reset

      set token="word1">$click.value$</set>
      set token="word2">$click.value2$</set>
    /drilldown>
  /table>
/panel>

/row>
row>
panel depends="$show_panel$">
table>
title>Like Words- Select up to 3 - $word1$ $word2$

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...