In a clustered single value map, why does the drilldown not work?

[rwiley]

when i click on the marker all it does is zoom. this is the drilldown i am using. wanting it to drill down to a chart in the same dashboard.

    <drilldown>
      <condition field="Site">
        <set token="varsite">$row.Site$</set>
      </condition>
    </drilldown>

[shaskell_splunk]

In order for drilldown to work, it must be enabled in the format menu and you need to add the field you wish to drilldown on into the final table command. Did you add the field "Site" to the final table command? Can you show me the search you're running? Also, what OS and browser are you using?

[rwiley]

we got it to work. only works in IE that we have tried. i usually work in chrome and it still doesn't work there. thanks for replu

[shaskell_splunk]

It's most likely a browser issue. I've tested this successfully on my Macbook running macOS 10.12.3 with Chrome ( 56.0.2924.87 (64-bit)), Firefox (51.0.1 (64-bit)) and Safari (Version 10.0.3 (12602.4.8)).

[DalJeanis · Accepted solution]

According to this reference to a training PDF

https://conf.splunk.com/session/2013/Using_Splunk_LisaGuinn_HowToUseDynamicDrilldown.pdf

• you need a link to the form. Use the link tag in angle brackets.
  

The following pages have additional links to examples.

Description here -
http://docs.splunk.com/Documentation/Splunk/6.2.0/Viz/Dynamicdrilldownindashboardsandforms

General Reference here - http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/Understandbasictableandchartdrilldownactions#D...

Elements reference here - http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#Drilldown_eleme...

[rwiley]

thanks for the reply. i am reading through the documentation now. the example above is just the latest i have tried. all of the ones i have used gave me the same results. clicking zooms in instead of linking. i will try some of the above and hope to get better results. will come back and let you know results.

[rwiley]

ok. i have tried a few different things. latest was just to try to ling to another dashboard. In chrome it still zoomed when clicked. IE10 will actually do the drilldown. is there documentation somewhere about browsers and splunk. the only ones i have seen where from 2011 and 2012

[mporath_splunk]

If you refer to this visualization, that's an app built by a Splunk employee in his spare time and not an officially supported app. Your best guess is to contact him directly. I'll make sure to point him to this question.

As for browser compatibility, Splunk lists supported browsers in the documentation for each release. IE10 is not supported anymore since version 6.4.

[rwiley]

yes. that is the app i am using. thanks. we are getting it to work right. just trial and error. funny thing is IE10 is the only browser we have tried that it works in. thanks for all your help;