Dashboards & Visualizations

SavedSearch Post Process drilldown help ??

rakesh_498115
Motivator

Hi, I am using a saved search to display a pie chart , on clickin that i am using a postproces module to show the stats ..but its not working ?? i knew if we use the search module directly we can use the postprocess module..but this is a savedsearch module i have hiddenpostprocess module..its working for the first drilldown . but not working on the second level postprocess drilldown..Please help..

My code..






*
False
1



<span class="server_header"><center><font size="6" face="Times New Roman" color="blue">Stats Dashboard </font></center></span>
<br>
<br>


srch_HistoricalSearch

| search gateway="A" | top Channel
Publisher Layer-Traffic Breakdown(For Past 1hr,Updated every 15 minutes)


true
pie

click1
80%
300px
False

| search Channel="$click1.value$" | stats count by Channel,SiteId,Location

events

10
True
true








Thanx

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You're using Splunk's HiddenPostProcess module, and not Sideview's PostProcess module.

Splunk's HiddenPostProcess module can not do any kind of $foo$ substitution, so that $click.value$ token you have is just not being substituted.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...