Dashboards & Visualizations

SavedSearch Post Process drilldown help ??

rakesh_498115
Motivator

Hi, I am using a saved search to display a pie chart , on clickin that i am using a postproces module to show the stats ..but its not working ?? i knew if we use the search module directly we can use the postprocess module..but this is a savedsearch module i have hiddenpostprocess module..its working for the first drilldown . but not working on the second level postprocess drilldown..Please help..

My code..






*
False
1



<span class="server_header"><center><font size="6" face="Times New Roman" color="blue">Stats Dashboard </font></center></span>
<br>
<br>


srch_HistoricalSearch

| search gateway="A" | top Channel
Publisher Layer-Traffic Breakdown(For Past 1hr,Updated every 15 minutes)


true
pie

click1
80%
300px
False

| search Channel="$click1.value$" | stats count by Channel,SiteId,Location

events

10
True
true








Thanx

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You're using Splunk's HiddenPostProcess module, and not Sideview's PostProcess module.

Splunk's HiddenPostProcess module can not do any kind of $foo$ substitution, so that $click.value$ token you have is just not being substituted.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Raw Data to Executive-Ready Stories, Faster

Build Data Stories for Every Audience  A dashboard is rarely just a dashboard. It might be the view an ...

Guided Onboarding with Auto-schema Is Now Generally Available

  We are excited to announce the General Availability of Guided Onboarding with Auto-Schematization ...

ATTENTION: We’re Moving! (AGAIN!)

The Splunk Community Slack is undergoing a system migration to keep our workspace secure and ...