Dashboards & Visualizations

drilldown from a dashboard for each cell

surekhasplunk
Communicator

My dashboard shows below 3 fields
Department_name, Permanent_Count, Temp_Count
computers, 10,5
electricals, 20,7
mechanical, 15, 10

Now permanent_count and Temp_count are calculated fields which is sum of a field from my input lookup file depending on many criteria like region, band etc.

So if i do a condition match with click.value2 and search for that value say 10 that wont exist in my look up file, since thats a calculated field not a direct one.

Now my requirement is if i click on number 10 in the row computers i should see all the name of employees under computers department .

Tags (1)
0 Karma
1 Solution

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

View solution in original post

0 Karma

niketn
Legend

@surekhasplunk, this seems to be a rephrased duplicate of the following question: https://answers.splunk.com/answers/590928/drilldown-cell-value.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

0 Karma

surekhasplunk
Communicator

Thanks it worked with $row.Department_name$ and also i have added search queries for each field passing this token along with other tokens. And disabling drilldown for few cells.

Thanks

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...