Dashboards & Visualizations

Passing 3 values to drilldown

sushmitha_mj
Communicator

I have a table with 5 columns. Currently, I am passing 2 values First value  is  in the first column(clickvalue) and second field is in the second column(clickvalue2) .  So far it is working fine. 

When I add another input  it does not take the input. It takes the the first column as clickvalue and where ever I click as clickvalue 2, so I an mot able to select the 3 rd input by clicking . I have tried to change the 3 rd input into $row.<fieldname>$ , clickvalue3, but none of this works. 

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

<fieldname> needs to be replaced with the name of your field e.g. $row.field1$

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Can you share your simple XML because $row.<fieldname>$ does work, so you may be doing something different?

0 Karma

sushmitha_mj
Communicator

Here is the drilldown 

<drilldown>
<set token="Time_Range">$click.value$</set>
<set token="host_name">$click.value2$</set>
<eval token="e">relative_time($click.value$,"-48h"</eval>
<eval token="l">$click.value$</eval>
<eval token="Start_Time">strftime($e$,"%Y-%m-%d %H:%M:%S")</eval>
<eval token="End_Time">strftime($l$,"%Y-%m-%d %H:%M:%S")</eval>
<eval token="user">$row.&lt;fieldname&gt;$</eval>           
</drilldown>

It is working fine without the user token... <eval token="user">$row.&lt;fieldname&gt;$</eval>   

And when I click... on the parent panel.. only 2 fields are getting selected instead of 3... So I am not sure, how to get 3 parameters passed.. 

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

<fieldname> needs to be replaced with the name of your field e.g. $row.field1$

0 Karma

sushmitha_mj
Communicator

Oops.. Worked Thanks 

0 Karma