Dashboards & Visualizations

Why is my field not being passed as a token to a new page with my Simple XML for dynamic drilldown?

deanamite91
Explorer

I've got the following search which shows the efficiency of customers:

index="commercial_performance" $month_token$ Cat1="Efficiency Variance *" Value!="within *" |  stats sum(Value) AS Efficiency by Customer | sort + Efficiency

When I select one of the customers, I want it to take me to a new page where the customer I selected is selected in the $Customer_token$ I have created.

<panel>
          <title>Customer Efficiency</title>
          <chart>
            <search>
              <query>index="commercial_performance" $month_token$ Cat1="Efficiency Variance *" Value!="within *" |  stats sum(Value) AS Efficiency by Customer | sort + Efficiency </query>
              <earliest>0</earliest>
              <latest></latest>
            </search>
            <option name="charting.chart">bar</option>
            <option name="height">550</option>
            <option name="charting.fieldColors">{"redValue":0xFF0000,"greenValue":0x73A550}</option>
            <option name="charting.axisY2.enabled">undefined</option>
            <option name="charting.axisLabelsX.majorLabelStyle.overflowMode">ellipsisNone</option>
            <option name="charting.axisLabelsX.majorLabelStyle.rotation">-45</option>
            <option name="charting.axisTitleX.visibility">visible</option>
            <option name="charting.axisTitleY.visibility">visible</option>
            <option name="charting.axisTitleY2.visibility">visible</option>
            <option name="charting.axisX.scale">linear</option>
            <option name="charting.axisY.scale">linear</option>
            <option name="charting.axisY2.scale">inherit</option>
            <option name="charting.chart.bubbleMaximumSize">50</option>
            <option name="charting.chart.bubbleMinimumSize">10</option>
            <option name="charting.chart.bubbleSizeBy">area</option>
            <option name="charting.chart.nullValueMode">gaps</option>
            <option name="charting.chart.sliceCollapsingThreshold">0.01</option>
            <option name="charting.chart.stackMode">default</option>
            <option name="charting.chart.style">shiny</option>
            <option name="charting.drilldown">all</option>
            <option name="charting.layout.splitSeries">0</option>
            <option name="charting.legend.labelStyle.overflowMode">ellipsisMiddle</option>
            <option name="charting.legend.placement">right</option>
            <option name="charting.axisTitleY.text">Efficiency (£)</option>
            <drilldown>
              <link> 
                https://146.105.85.57/en-GB/app/Commercial/second_level_customer_dashboard?form.token=$Customer_toke...
              </link>
            </drilldown>
          </chart>
        </panel>

As you can see near the end of my XML ,I have a drilldown to the page I want to go, but it isn't passing over the field as a token.

Please help.

0 Karma

somesoni2
Revered Legend

Change following in your xml

1) change the drilldown from 'all' to 'row'

<option name="charting.drilldown">row</option>

2) Replace $Customer_token$ in drilldown URL/link with $row.Customer$

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security(ES) 7.3 is approaching the end of support. Get ready for ...

Hi friends!    At Splunk, your product success is our top priority. With Enterprise Security (ES), we're here ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...