Dashboards & Visualizations

drilldown from a dashboard for each cell

surekhasplunk
Communicator

My dashboard shows below 3 fields
Department_name, Permanent_Count, Temp_Count
computers, 10,5
electricals, 20,7
mechanical, 15, 10

Now permanent_count and Temp_count are calculated fields which is sum of a field from my input lookup file depending on many criteria like region, band etc.

So if i do a condition match with click.value2 and search for that value say 10 that wont exist in my look up file, since thats a calculated field not a direct one.

Now my requirement is if i click on number 10 in the row computers i should see all the name of employees under computers department .

Tags (1)
0 Karma
1 Solution

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

View solution in original post

0 Karma

niketn
Legend

@surekhasplunk, this seems to be a rephrased duplicate of the following question: https://answers.splunk.com/answers/590928/drilldown-cell-value.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

elliotproebstel
Champion

In your drilldown, you can reference other fields in the same row by using the syntax $row.<fieldname>$. So for example, you can reference $row.Department_name$ in your drilldown, and pass that token into your drilldown search.

0 Karma

surekhasplunk
Communicator

Thanks it worked with $row.Department_name$ and also i have added search queries for each field passing this token along with other tokens. And disabling drilldown for few cells.

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...