Dashboards & Visualizations

drilldown from a dashboard for each cell

surekhasplunk
Communicator

My dashboard shows below 3 fields
Department_name, Permanent_Count, Temp_Count
computers, 10,5
electricals, 20,7
mechanical, 15, 10

Now permanent_count and Temp_count are calculated fields which is sum of a field from my input lookup file depending on many criteria like region, band etc.

So if i do a condition match with click.value2 and search for that value say 10 that wont exist in my look up file, since thats a calculated field not a direct one.

Now my requirement is if i click on number 10 in the row computers i should see all the name of employees under computers department .

Tags (1)
0 Karma
1 Solution

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

View solution in original post

0 Karma

niketn
Legend

@surekhasplunk, this seems to be a rephrased duplicate of the following question: https://answers.splunk.com/answers/590928/drilldown-cell-value.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

0 Karma

surekhasplunk
Communicator

Thanks it worked with $row.Department_name$ and also i have added search queries for each field passing this token along with other tokens. And disabling drilldown for few cells.

Thanks

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...