Dashboards & Visualizations

How to send a specific value to another dashboard without clicking on the value

alaaelbahrawy
Explorer

Can I use the Splunk Drill down to send the data from a dashboard to another dashboard if the data increased than a specific threshold?

For example, Dashboard A has a Value 90% and the threshold is 80% then it sends the data to Dashboard B.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@alaaelbahrawy

Here I suggest to keep Dashboard A's Value and Threashold logic in Dashboard B.
Like...

Copy search from Dashboard A and use it to set token in Dashboard B.

See below sample XML for same. Here I have used search from Dashboard A (for example) and add condition in search as per your requirement (like. I added in below XML | where Value=90 AND threshold=80). You can see a token tkn_data which is set on the basis of search results. You can use this tkn_data token in your dashboard. You can validate the XML by modifying Value AND threshold value in search.

<form>
  <label>Dashboard Example</label>
  <search>
          <query>| makeresults | eval Value=900,threshold=80 | rename COMMENT as "This is sample of your search" | fields Value threshold| where Value=90 AND threshold=80 </query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <done>
            <condition match="'job.resultCount' == 0">
              <set token="tkn_data">Other Value</set>  
            </condition>
            <condition>
              <set token="tkn_data">My Expected Value</set>
            </condition>
          </done>
        </search>
  <row>
    <panel>
      <html>
        <b> Results from search manager: $tkn_data$</b>
      </html>
    </panel>
  </row>
</form>

I hope this will help you.

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...