Dashboards & Visualizations
Highlighted

Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

It's kinda like a main table showing all options, when you click one, the second table shows more info about the selected row.
I followed the drilldown tutorials, but I think I might be missing something with my query as follows:

<dashboard>
  <label>Test</label>
  <row>
    <table>
      <searchString>index=main | table Channel</searchString>
      <drilldown>
        <link>
   <![CDATA[
    /app/multicanal/test?form.Channel=$row.Channel$&earliest=$earliest$&latest=$latest$
            ]]>
        </link>
      </drilldown>
    </table>
  </row>
     <searchTemplate>Channel=$Channel$ | head 100</searchTemplate>
     <earliestTime>-30d</earliestTime>
     <latestTime>-0d</latestTime>
     <fieldset autoRun="true" submitButton="false">
       <input token="Channel"/>
     </fieldset>
     <row>
       <table>
        <title>Teste</title>
        <option name="count">50</option>
      </table>
     </row>
</dashboard>

Thanks In Advance!

0 Karma
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

By the main this searchTemplate is just a test search, not acctually what I'm gonna use, the big problem is that, I'm not sure if the drilldown is passing the selected row's value to the $parameter$ token =//

0 Karma
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

I found the correct term for this... as googlin' aroun'... seems like it's called IN-PAGE-DRILLDOWN but my Example app doesn't have this and I can't install it because I'm not the server owner...

0 Karma
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

SplunkTrust
SplunkTrust

What version of Splunk are you using?

0 Karma
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

Splunk 6.1

I'm not so good with JavaScript, is it possible with Simple XML?

0 Karma
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Influencer
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

@strive @somesoni2

I've found another way through, after burnin' down my brain LOL
I did this Simple XML snippet, seems working fine for me, it's updating the table correctly, now everything I need to find out is a way to Hide the text input from the drilldown and maybe hide the MORE INFO table until user selects a row at first table...
Check It Out 😄

<form>
  <label>Test Drilldown Query</label>
  <description/>
  <row>
    <table>
      <searchString>index=main | table ChannelCode</searchString>
      <drilldown>
        <link>
          <![CDATA[
    /app/test/test?form.ChannelCode=$row.ChannelCode$&earliest=$earliest$&latest=$latest$
            ]]>
        </link>
      </drilldown>
    </table>
  </row>
  <searchTemplate>ChannelCode=$ChannelCode$ | stats count by ChannelCode</searchTemplate>
  <earliestTime>$earliest$</earliestTime>
  <latestTime>$latest$</latestTime>
  <fieldset autoRun="true" submitButton="false">
    <input token="ChannelCode">
      <label>Choosen Value</label>
    </input>
  </fieldset>
  <row>
    <table>
      <title>More Info</title>
      <searchString>index=main ChannelCode=$ChannelCode$ | timechart count by ChannelCode</searchString>
      <earliestTime>$earliest$</earliestTime>
      <latestTime>$latest$</latestTime>
      <option name="wrap">true</option>
      <option name="rowNumbers">false</option>
      <option name="dataOverlayMode">none</option>
      <option name="drilldown">none</option>
      <option name="count">10</option>
    </table>
  </row>
</form>

View solution in original post

Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

Does anyone knows if <input> tag has a property to set like isVisible="false" ?
Not working here...

0 Karma
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

SplunkTrust
SplunkTrust

Try this

    <form>
      <label>Test Drilldown Query</label>
      <description/>
      <row>
        <table>
          <searchString>index=main | table ChannelCode</searchString>
          <drilldown>
            <link>
              <![CDATA[
        /app/test/test?form.ChannelCode=$row.ChannelCode$&earliest=$earliest$&latest=$latest$
                ]]>
            </link>
          </drilldown>
        </table>
      </row>
      <searchTemplate>ChannelCode=$ChannelCode$ | stats count by ChannelCode</searchTemplate>
      <earliestTime>$earliest$</earliestTime>
      <latestTime>$latest$</latestTime>
      <fieldset autoRun="true" submitButton="false">
        <input token="ChannelCode" id="field1">
          <label>Choosen Value</label>
        </input>
    <html>
<style>
.input#field1
{
display:none;
}
</style>
     </html>
      </fieldset>
      <row>
        <table>
          <title>More Info</title>
          <searchString>index=main ChannelCode=$ChannelCode$ | timechart count by ChannelCode</searchString>
          <earliestTime>$earliest$</earliestTime>
          <latestTime>$latest$</latestTime>
          <option name="wrap">true</option>
          <option name="rowNumbers">false</option>
          <option name="dataOverlayMode">none</option>
          <option name="drilldown">none</option>
          <option name="count">10</option>
        </table>
      </row>
    </form>
Highlighted

Re: Is it possible to update a table with a drilldown value from another table's field in the same browser tab?

Contributor

I tryed styling it withing an HTML tag, but for some reason, it was also losing the query itself...
Although I did like this:
I'm going to try your snippet, see if it works with the search as well...





0 Karma