Dashboards & Visualizations

Tokens available when using SimpleXML Single?

Jason
Motivator

I have a search that is returning one row, and this has multiple fields on it, A, B, C, and D.

Field C I use for display in a <single>

It appears I can't use $row.A$ in a <drilldown>? How do I access this field for sending it to the next dashboard?

0 Karma
1 Solution

Jason
Motivator
0 Karma

Jason
Motivator

Hmm, per http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#single_.28even... it does seem like $row.___$ should be available - I'll keep investigating.

0 Karma
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...