Dashboards & Visualizations

How to send a specific value to another dashboard without clicking on the value

alaaelbahrawy
Explorer

Can I use the Splunk Drill down to send the data from a dashboard to another dashboard if the data increased than a specific threshold?

For example, Dashboard A has a Value 90% and the threshold is 80% then it sends the data to Dashboard B.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@alaaelbahrawy

Here I suggest to keep Dashboard A's Value and Threashold logic in Dashboard B.
Like...

Copy search from Dashboard A and use it to set token in Dashboard B.

See below sample XML for same. Here I have used search from Dashboard A (for example) and add condition in search as per your requirement (like. I added in below XML | where Value=90 AND threshold=80). You can see a token tkn_data which is set on the basis of search results. You can use this tkn_data token in your dashboard. You can validate the XML by modifying Value AND threshold value in search.

<form>
  <label>Dashboard Example</label>
  <search>
          <query>| makeresults | eval Value=900,threshold=80 | rename COMMENT as "This is sample of your search" | fields Value threshold| where Value=90 AND threshold=80 </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <done>
            <condition match="'job.resultCount' == 0">
              <set token="tkn_data">Other Value</set>  
            </condition>
            <condition>
              <set token="tkn_data">My Expected Value</set>
            </condition>
          </done>
        </search>
  <row>
    <panel>
      <html>
        <b> Results from search manager: $tkn_data$</b>
      </html>
    </panel>
  </row>
</form>

I hope this will help you.

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...