Dashboards & Visualizations

How to to enable drilldown for the columns whose field-names start with XYZ?

lostcauz3
Path Finder
KPI XYZ-123 XYZ-12345 Service-123 Service-12345
random_data random_data random_data random_data random_data
random_data random_data random_data random_data random_data

 

I Have a dashboard like this one above , I want to enable drilldown for the columns whose field-names start with XYZ

and disable drilldown for the ones that start with Service.

Is there any way i can achieve this in xml ?

Labels (2)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try something based on this

        <drilldown>
          <condition match="match('click.name2',&quot;XYZ&quot;)">
            <eval token="namematch">$click.name2$</eval>
          </condition>
          <condition>
            <set token="nameechosen">No match</set>
          </condition>
        </drilldown>
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...