Is There a Way to Enforce Visualization in a Drilldown Search?

[proletariat99]

Is there a way to enforce the visualization tab in a drilldown search? I'm in ES and I would like the drilldown search to pull up the timechart visualization (instead of the table). Can you enforce that somehow in SPL?

[martin_mueller]

You can append display.general.type=visualizations to the URL parameters in the drilldown.

[proletariat99]

Are you talking about the XML parameters on a dashboard over which I have control? Unfortunately, I'm talking about an ES Correlation Search drilldown, over which I have very little control. I was hoping there was an SPL switch that was like | timechart per_day(data) force_visualization=true or something (yes, I realize that doesn't exist) 🙂