Dashboards & Visualizations

drilldown for field values in a dashboard

Gowthamdevaraj
New Member

Hello Everyone,

I want to create a dashboard drill down based on filed values.

example: I have a dashboard with a field name "Product" which contains various list of product such as product A, product B etc..
Now I want to create a drill down dashboard, based on filed values, If i click in Product A it has to take to a dashboard for product A and similarly to product B and respective Dashboards.

Thanks

0 Karma

woodcock
Esteemed Legend

This is the default behavior so just use the GUI to turn it on. Click Edit and then the hamburger menu which is the 4th/last panel edit icon.

0 Karma

vnravikumar
Champion

Hi

Check the below sample, here I checked condition for sourcetype =splunkd and redirect to splunkd dashboard similarly you can check for others

<dashboard>
  <label>Drilldown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <condition match="isnotnull('row.sourcetype') AND 'row.sourcetype' == &quot;splunkd&quot;">
            <link target="_blank">/app/search/splunkd</link>
          </condition>
          <condition >
          </condition>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>

OR

Create dashboard names with drilldown value. for example here splunkd

<dashboard>
  <label>Drilldown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal |stats count by sourcetype</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">cell</option>
        <drilldown>
          <condition match="isnotnull('row.sourcetype')">
            <link target="_blank">/app/search/$row.sourcetype$</link>
          </condition>
          <condition >
          </condition>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...