Dashboards & Visualizations

How to send a specific value to another dashboard without clicking on the value

alaaelbahrawy
Explorer

Can I use the Splunk Drill down to send the data from a dashboard to another dashboard if the data increased than a specific threshold?

For example, Dashboard A has a Value 90% and the threshold is 80% then it sends the data to Dashboard B.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@alaaelbahrawy

Here I suggest to keep Dashboard A's Value and Threashold logic in Dashboard B.
Like...

Copy search from Dashboard A and use it to set token in Dashboard B.

See below sample XML for same. Here I have used search from Dashboard A (for example) and add condition in search as per your requirement (like. I added in below XML | where Value=90 AND threshold=80). You can see a token tkn_data which is set on the basis of search results. You can use this tkn_data token in your dashboard. You can validate the XML by modifying Value AND threshold value in search.

<form>
  <label>Dashboard Example</label>
  <search>
          <query>| makeresults | eval Value=900,threshold=80 | rename COMMENT as "This is sample of your search" | fields Value threshold| where Value=90 AND threshold=80 </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <done>
            <condition match="'job.resultCount' == 0">
              <set token="tkn_data">Other Value</set>  
            </condition>
            <condition>
              <set token="tkn_data">My Expected Value</set>
            </condition>
          </done>
        </search>
  <row>
    <panel>
      <html>
        <b> Results from search manager: $tkn_data$</b>
      </html>
    </panel>
  </row>
</form>

I hope this will help you.

Thanks

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...