Dashboards & Visualizations

Issues with performing drilldown on Splunk dashboard while passing token values - Search is Waiting for Input is displayed

ajgill1986
New Member

I am trying to establish drilldown dashboards for something as per below. However, the drilldown link is working fine (when i click on the relevant field) but it does not result in providing the output in the drilldown.
It ends up saying "Search is waiting for Input". Any idea how it can be fixed?

  • The original dashboard for sales where one of the value is going to be picked up depending on the click performed on the statistics table and passed on to the secondary dashboard to present the drilldown output:

alt text

  • Search query on the secondary linked dashboard to run the output using the input provided by the token: alt text
0 Karma

lestat1760
Explorer

you can try with

<link><![CDATA[ https://www.abc.com/drilldown/dashboard?form.sales=$sales$]]></link>

0 Karma

jeffland
SplunkTrust
SplunkTrust

You need to have an input on the second page which uses the token, otherwise the search won't pick it up (which is why you're seeing "Search is waiting for input"). If you don't want to see the input on the destination dashboard, you can do something like

<input depends="$token_which_is_not_set$" token="sales" ...>

to hide the input.

0 Karma

sundareshr
Legend

You need to pass the token value ($sales$) in the URL. Try this

<link><![CDATA[ http://abc.com/drilldown/dash?sales=$sales$]]></link>

http://docs.splunk.com/Documentation/Splunk/6.5.0/Viz/Dynamicdrilldownindashboardsandforms

0 Karma

ajgill1986
New Member

Thanks for the quick response.

i tried passing the token value in the URL as per your suggestion but it is still returning the same outcome "Search is waiting for input" on the drilldown version.

any other idea on how it can be fixed?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...