Dashboards & Visualizations

How to have Sankey diagram drilldown to set form tokens?

Graham_Hanningt
Builder

I am using Splunk 8.1.0 with the Sankey Diagram 1.5.0 app.

I have a sankey diagram viz in a dashboard. The source and target fields of the sankey correspond to  dashboard form inputs that I use to filter queries.

When the dashboard user clicks on the left side of the sankey diagram (a source field value), I want to set the corresponding form input to that value.

Similarly, when the user clicks on the right side of the sankey diagram (a target field value), I want to set the corresponding form input to that value.

How do I do that?

I've tried:

 

 

 

 

<drilldown>
  <condition field="source">
    <set token="form.applid">$click.name2$</set>
    <set token="applid">APPLID="$click.name2$"</set>
  </condition>
  <condition field="target">
    <set token="form.poolid">$click.name2$</set>
    <set token="applid">"ENQ Pool ID"="$click.name2$"</set>
  </condition>
</drilldown>

 

 

 

 

 

(where "applid" and "poolid" are the tokens set by the form inputs, and also the corresponding form input id attribute values)

but that navigates to a new tab with a new search that has the "set" values appended:

... APPLID=TXCQAIC "ENQ Pool ID"=EXECSTRN

I don't want to navigate to a new window. I want to remain on the same dashboard, and just update the form inputs and their corresponding tokens.

Labels (1)
Tags (3)
0 Karma

duncan_
New Member

Late to this discussion, but posting the answer here for any folks who search this up later.

After some testing, I found that the Sankey drilldown tokens use the $row.Field Name$ format:

      <viz type="sankey_diagram_app.sankey_diagram">
        <search>
          <query>... | stats sum(bytes) as total_bytes count by source target</query>
        </search>
        <option name="drilldown">all</option>
        <drilldown>
          <set token="form.source_tok">$row.source$</set>
          <set token="form.target_tok">$row.target$</set>
        </drilldown>
      </viz>

 

I don't believe there's a way to distinguish between a click on the source versus the target, so field conditions don't seem to work like they would for a table.

Tags (2)
0 Karma

izyknows
Path Finder

Did you find a way to do this? I'm looking for it as well. $click.value$ and $click.value2$ don't seem to work with Sankey diagrams. When I try to set them using

<drilldown>
          <set token="show_panel">true</set>
          <set token="local">$click.value$</set>
          <set token="test2">$click.value2$</set>
</drilldown>

It seems upon click, I see an action taking place but the variables are just displayed as $click.value$, i.e, they don't take any value from the Sankey diagram.

If i find something that works, I'll post back here for the next poor soul.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...