Dashboards & Visualizations

Splunk Panel as pop window for drilldown

Rukmani_Splunk
Path Finder

I  need to  have display  splunk  dashboard  as pop  window when we click  as drilldown.

 

For example index=_internal |stats count by source, sourcetype

when click on the  table it  should pop  up  a panel containing  the below search  

index_internal |table sourcetype

Labels (1)
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Rukmani_Splunk 

Please check the below links for example code for required Solution.

splunk_dashboard_model_view_examples

XML

example_1.xml

JS

app.js

Model View Component 

ModalViewComponent.js

 

Please let me know incase any help you required on this code.

KV

0 Karma

Rukmani_Splunk
Path Finder

Hi  Thanks for your reply  , I  am very  new to  this  java script  

 and i  get  the belwo  error 

 

ncaught Error: Script error for: ../app/splunk_dashboard_model_view_examples/components/ModalViewComponent
http://requirejs.org/docs/errors.html#scripterror
at makeError (eval at module.exports (common.js:134), <anonymous>:166:17)
at HTMLScriptElement.onScriptError (eval at module.exports (common.js:134), <anonymous>:1689:36)

 

 

 

 

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@Rukmani_Splunk 

Can you please share your sample code?

KV

0 Karma

Rukmani_Splunk
Path Finder

require([
'underscore',
'".Modal.js"',
'splunkjs/mvc',
'splunkjs/mvc/searchmanager',
'splunkjs/mvc/simplexml/ready!'
], function(_, ModalViewComponent, mvc, SearchManager) {
var tableElement = mvc.Components.getInstance("tbl_1");
tableElement.on("click", function(e) {
console.log(e.data);
console.log(e.data['row.sourcetype']);
var modal = new ModalViewComponent({
title: "Demo Table View",
id: "tb1_1",
search: new SearchManager({
earliest_time: "-15m",
latest_time: "now",
preview: false,
cache: false,p
search: 'index=_internal sourcetype="' + e.data['row.sourcetype'] + '" | stats count by source'
}, { tokens: true, tokenNamespace: "submitted" }),
display_component: {
viz_model: require('splunkjs/mvc/tableview'),
viz_options: {
pageSize: '10',
data: "events",
drilldown: "row",
},
drilldown: (e) => {
console.log(e);
}
}
});
modal.show();
});
});

 

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...