Dashboards & Visualizations

can i change/show default dropdown when using drilldown

Purk9
Explorer

In my dashboard there's a panel thats changes a token when I use a drilldown.  The same token can also be changed by a global dropdown on the dashboard. Unfortunately the dropdown doesn't change visibly when i use the drilldown option. Is this possible? Maybe by refreshing only the dropdown while drilling down?

Labels (2)
0 Karma
1 Solution

renjith_nair
Legend

You should be able to do that with form.token

Try this run anywhere example. Select the dropdown for a value and click on the table for another drilldown value. It should reflect in the dropdown

 

<form>
  <label>DropDown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="filter">
      <label>Filter</label>
      <choice value="A">A</choice>
      <choice value="B">B</choice>
      <choice value="C">C</choice>
      <default>A</default>
      <initialValue>A</initialValue>
    </input>
  </fieldset>
  <row>
    <panel>
      <title>FILTERS</title>
      <table>
        <search>
          <query>|makeresults|eval fields="A B C"|makemv fields|mvexpand fields</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <set token="filter">$row.fields$</set>
          <set token="form.filter">$row.fields$</set>
        </drilldown>
      </table>
    </panel>
    <panel>
      <title>Selected filter</title>
      <single>
        <search>
          <query>|makeresults|eval filter="$filter$"</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="showSparkline">0</option>
        <option name="showTrendIndicator">0</option>
      </single>
    </panel>
  </row>
</form>

 

 

---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

renjith_nair
Legend

You should be able to do that with form.token

Try this run anywhere example. Select the dropdown for a value and click on the table for another drilldown value. It should reflect in the dropdown

 

<form>
  <label>DropDown</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="filter">
      <label>Filter</label>
      <choice value="A">A</choice>
      <choice value="B">B</choice>
      <choice value="C">C</choice>
      <default>A</default>
      <initialValue>A</initialValue>
    </input>
  </fieldset>
  <row>
    <panel>
      <title>FILTERS</title>
      <table>
        <search>
          <query>|makeresults|eval fields="A B C"|makemv fields|mvexpand fields</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <set token="filter">$row.fields$</set>
          <set token="form.filter">$row.fields$</set>
        </drilldown>
      </table>
    </panel>
    <panel>
      <title>Selected filter</title>
      <single>
        <search>
          <query>|makeresults|eval filter="$filter$"</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
        <option name="showSparkline">0</option>
        <option name="showTrendIndicator">0</option>
      </single>
    </panel>
  </row>
</form>

 

 

---
What goes around comes around. If it helps, hit it with Karma 🙂

Purk9
Explorer

if you know it, it's so simple 🙂 Thanks!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...