Dashboards & Visualizations

drilldown for field values in a dashboard

Gowthamdevaraj
New Member

Hello Everyone,

I want to create a dashboard drill down based on filed values.

example: I have a dashboard with a field name "Product" which contains various list of product such as product A, product B etc..
Now I want to create a drill down dashboard, based on filed values, If i click in Product A it has to take to a dashboard for product A and similarly to product B and respective Dashboards.

Thanks

0 Karma

woodcock
Esteemed Legend

This is the default behavior so just use the GUI to turn it on. Click Edit and then the hamburger menu which is the 4th/last panel edit icon.

0 Karma

vnravikumar
Champion

Hi

Check the below sample, here I checked condition for sourcetype =splunkd and redirect to splunkd dashboard similarly you can check for others

<dashboard>
  <label>Drilldown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <condition match="isnotnull('row.sourcetype') AND 'row.sourcetype' == &quot;splunkd&quot;">
            <link target="_blank">/app/search/splunkd</link>
          </condition>
          <condition >
          </condition>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>

OR

Create dashboard names with drilldown value. for example here splunkd

<dashboard>
  <label>Drilldown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <condition match="isnotnull('row.sourcetype')">
            <link target="_blank">/app/search/$row.sourcetype$</link>
          </condition>
          <condition >
          </condition>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma
Get Updates on the Splunk Community!

Splunk APM & RUM | Upcoming Planned Maintenance

There will be planned maintenance of the streaming infrastructure for Splunk APM and Splunk RUM in the coming ...

Part 2: Diving Deeper With AIOps

Getting the Most Out of Event Correlation and Alert Storm Detection in Splunk IT Service Intelligence   Watch ...

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...