Dashboards & Visualizations

SavedSearch Post Process drilldown help ??

rakesh_498115
Motivator

Hi, I am using a saved search to display a pie chart , on clickin that i am using a postproces module to show the stats ..but its not working ?? i knew if we use the search module directly we can use the postprocess module..but this is a savedsearch module i have hiddenpostprocess module..its working for the first drilldown . but not working on the second level postprocess drilldown..Please help..

My code..






*
False
1



<span class="server_header"><center><font size="6" face="Times New Roman" color="blue">Stats Dashboard </font></center></span>
<br>
<br>


srch_HistoricalSearch

| search gateway="A" | top Channel
Publisher Layer-Traffic Breakdown(For Past 1hr,Updated every 15 minutes)


true
pie

click1
80%
300px
False

| search Channel="$click1.value$" | stats count by Channel,SiteId,Location

events

10
True
true








Thanx

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You're using Splunk's HiddenPostProcess module, and not Sideview's PostProcess module.

Splunk's HiddenPostProcess module can not do any kind of $foo$ substitution, so that $click.value$ token you have is just not being substituted.

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...