Wire a Click from a Chart to Input IP Address in Form

[jodros]

I have built an app that has a summary dashboard with several panel charts running off of scheduled searches. There is also a form search that prompts the user to input an IP address, which then populates charts specific to that one IP.

The app works great for our needs, however there is one slight inconvenience, you have to remember an IP from the summary dashboard and manually enter it on the form search on the next page. Is there a way for a user to click on a chart and populate the form search? I would like the user to have the choice of clicking a chart to find out more on a specific IP, or manually enter it if they would like or if it isn't present in the chart.

Thanks in advance for the assistance.

[araitz · Accepted solution]

In a future version of Splunk, it should be easier to drill down in Simple XML. For now, in Advanced XML you can use the ConvertToIntention and ViewRedirector to accomplish drilldown between views. Check out the unix app or deployment monitor apps for examples.

[Stefan_van_de_R]

It can be interesting to take a look at the drill down actions of Splunk. I think this is pretty much want you want. I don't know if it works together with your current implementation of the 'next' page where you search with a form, but that would probably be a small change of code.

The next link refers to the documentation of drill down actions
http://docs.splunk.com/Documentation/Splunk/latest/user/UnderstandTableandChartDrilldownActions

[jodros]

svdrijt, thanks for the reply. Yeah, I have read the documentation. I guess I wanted to make sure it could be done before I convert my simple XML form to advanced XML. I will give this a try and see what happens.