Dashboards & Visualizations

drilldown problem

kavyakanne
Engager
<form>
  <label>Backup Report Dashboard Clone</label>
  <fieldset submitButton="false">
    <input type="dropdown" token="sour" searchWhenChanged="true">
      <label>Datacentre</label>
      <search>
        <query>index="backup" sourcetype="csv"
| rex field=source "^(?<sour>[^_\.]*)\.csv"
|table sour
| dedup sour
| sort sour</query>
        <earliest>0</earliest>
        <latest></latest>
      </search>
      <fieldForLabel>sour</fieldForLabel>
      <fieldForValue>sour</fieldForValue>
      <selectFirstChoice>true</selectFirstChoice>
      <suffix>.csv</suffix>
    </input>
  </fieldset>
  <row>
    <panel>
      <html>
      <style type="text/css">
#current .single-result {
font-size: 60px !important;
color: #00FF00;
}
</style>
</html>
    </panel>
  </row>
  <row depends="$alwaysHideCSSPanel$">
    <panel>
      <html>
         <style>
           .dashboard-panel h2{
             background:#1E90FF !important;
             color:white !important;
             text-align: center !important;
             font-weight: bold !important;
             border-top-right-radius: 15px;
             border-top-left-radius: 15px;
           }
         </style>
       </html>
    </panel>
  </row>
  <row depends="$alwaysHideCSSPanel$">
    <panel>
      <html>
         <style>
           .dashboard-panel h2{
             background:#1E90FF !important;
             color:white !important;
             text-align: center !important;
             font-weight: bold !important;
             border-top-right-radius: 15px;
             border-top-left-radius: 15px;
           }
         </style>
       </html>
    </panel>
  </row>
  <row>
    <panel depends="$alwaysHideCSS$">
      <html>
         <style>
           #p1{
             width:60% !important;
           }
           #p2{
             width:40% !important;
           }
         </style>
       </html>
    </panel>
  </row>
  <row>
    <panel>
      <title>Criteria v/s Service</title>
      <table>
        <search>
          <query>

index="backup" sourcetype="csv"
source ="$sour$"
|dedup extracted_Host
|eval BackupType=BackupType." "."Backup"
|eval Tier=if(Tier="null","NOT in CMDB",if(Tier="Not Supported","No SLA Defined",Tier))
|stats count as "Total Backup" by Tier
|chart values("Total Backup") over "Total Backup" by Tier
|fields - "Total Backup"
|eval BackupType = "Total Backup"
|stats values(*) as * by BackupType
]

|append [ search
index="backup" sourcetype="csv"
source ="$sour$"
|dedup extracted_Host
|eval BackupType=BackupType." "."Backup"
|eval Tier=if(Tier="null","NOT in CMDB",if(Tier="Not Supported","No SLA Defined",Tier))
|eval FinalJobStatus = if(FinalJobStatus="Completed (Exceptions)","Total Success",if(FinalJobStatus="Completed (Failed)","Total Failure",if(FinalJobStatus="Completed (Success)","Total Success",if(FinalJobStatus="Canceled","Total Canceled",if(FinalJobStatus="Running","Total Running","Total Recovered")))))
|chart count(FinalJobStatus) over FinalJobStatus by Tier
|sort FinalJobStatus
|rename FinalJobStatus as BackupType
]

| eval Rank=case(BackupType="Total CI","1",BackupType="Total Backup","2",BackupType="Total Success","9",BackupType="Total Failure","10",BackupType="Total Running","11",BackupType="Total Recovered","12",BackupType="Daily-Incremental-Backup","4",BackupType="Daily-Full-Backup","5",BackupType="Not Backedup","3",BackupType="Monthly-Full-Backup","7",BackupType="Weekly-Full-Backup","6",BackupType="Yearly-Full-Backup","8",BackupType="Total Backup Size (GB)","13")
| sort WHS, Rank
| fields - Rank
|rename BackupType as "Criteria"
|table Criteria Gold,Silver,Bronze,"NOT in CMDB","No SLA Defined"
 ===================
</query>
          <earliest>0</earliest>
          <latest></latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
       <drilldown target="_blank">
          <condition field="Total">
            <set token="t1">$click.value$</set>
            <set token="t2">$click.value$</set>
            <set token="t3">$click.value$</set>
            <set token="t4">$click.value$</set>
          </condition>
          <condition field="*">
            <set token="t1">$click.value$</set>
             <set token="Tier">$click.name2$</set>
                <set token="Criteria">$click.value$</set>
          </condition>
           <condition field="*">
            <set token="t2">$click.value$</set>
            <set token="Tier">$click.name2$</set>
                 <set token="TotalBackup">$click.value$</set>
          </condition>
        </drilldown>
      </table>
==============
    </panel>
  </row>
  <row>
    <panel  depends="$t1$">
      <title>List of Hosts - $Tier$ - $Criteria$</title>
      <table>
        <search>
          <query>index="backup" sourcetype="csv"
source ="$sour$"
|dedup extracted_Host
|eval BackupType=BackupType." "."Backup"
|eval Tier=if(Tier="null","NOT in CMDB",if(Tier="Not Supported","No SLA Defined",Tier))
|eval FinalJobStatus = if(FinalJobStatus="Completed (Exceptions)","Total Success",if(FinalJobStatus="Completed (Failed)","Total Failure",if(FinalJobStatus="Completed (Success)","Total Success",if(FinalJobStatus="Canceled","Total Canceled",if(FinalJobStatus="Running","Total Running","Total Recovered")))))
|search Tier="$Tier$"
|search FinalJobStatus="$Criteria$"
|rename "extracted_Host" as Hosts
|table Hosts</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="count">6</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="link.exportResults.visible">1</option>
        <option name="link.inspectSearch.visible">1</option>
        <option name="link.openPivot.visible">0</option>
        <option name="link.openSearch.visible">1</option>
        <option name="link.visible">0</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="wrap">true</option>
       <drilldown target="_blank">
            <unset token="TypeBackup"></unset>
           <unset token="TotalBackup"></unset>
           <unset token="NotBackedup"></unset>
           <unset token="t2"></unset>
           <unset token="t3"></unset>
           <unset token="t4"></unset>
         </drilldown>

      </table>
    </panel>
  </row>
  <row>
    <panel  depends="$t2$">
      <title>List of Hosts - $Tier$ - $Criteria$</title>
      <table>
        <search>
          <query>index="backup" sourcetype="csv"
source ="$sour$"
|dedup extracted_Host
|eval BackupType=BackupType." "."Backup"
|eval BackupType = "Total Backup"
|eval Tier=if(Tier="null","NOT in CMDB",if(Tier="Not Supported","No SLA Defined",Tier))
|search Tier="$Tier$"
|search BackupType="$Criteria$"
|rename "extracted_Host" as Hosts
|table Hosts</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
        <option name="count">6</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="link.exportResults.visible">1</option>
        <option name="link.inspectSearch.visible">1</option>
        <option name="link.openPivot.visible">0</option>
        <option name="link.openSearch.visible">1</option>
        <option name="link.visible">0</option>
        <option name="refresh.display">progressbar</option>
        <option name="rowNumbers">false</option>
        <option name="wrap">true</option>
       <drilldown target="_blank">
           <unset token="Criteria"></unset>
            <unset token="TypeBackup"></unset>
            <unset token="NotBackedup"></unset>
             <unset token="t1"></unset>
           <unset token="t3"></unset>
           <unset token="t4"></unset>
         </drilldown>
      </table>
    </panel>
  </row>

</form>

================================

when on-click on d values form main search query the panels are changing but a single query is only being run but not choosing accordingly to click.value and always below query os only being run

 <query>index="backup" sourcetype="csv"
source ="$sour$"
|dedup extracted_Host
|eval BackupType=BackupType." "."Backup"
|eval Tier=if(Tier="null","NOT in CMDB",if(Tier="Not Supported","No SLA Defined",Tier))
|eval FinalJobStatus = if(FinalJobStatus="Completed (Exceptions)","Total Success",if(FinalJobStatus="Completed (Failed)","Total Failure",if(FinalJobStatus="Completed (Success)","Total Success",if(FinalJobStatus="Canceled","Total Canceled",if(FinalJobStatus="Running","Total Running","Total Recovered")))))
|search Tier="$Tier$"
|search FinalJobStatus="$Criteria$"
|rename "extracted_Host" as Hosts
|table Hosts</query>
Labels (1)
Tags (1)
0 Karma

kavyakanne
Engager

@gcusello

I've explained in detail pleasedo assist
Thank you!

0 Karma

kavyakanne
Engager

This is my table view (with muliptle appends) this keeps changing with a dropdown selection (Datacentre)

Criteria Gold Silver Bronze NOT in CMDB No SLA Defined
Total CI 180 95 147
Total Backup 39 33 8 1 3
Not Backedup 154 63 138
Daily-Incremental-Backup 23 30 8 0 3
Daily-Full-Backup 3 2 0 0 0
Weekly-Full-Backup 5 0 0 0 0
Monthly-Full-Backup 8 0 0 1 0
Total Success 30 32 8 0 3
Total Failure 8 0 0 1 0
Total Running 1 1 0 0 0

Total Backup Size (GB) 4966 836 63 361 31

I've written 4 drilldown panels
(Total Backup
Not Backedup
Daily-Full-Backup Weekly-Full-Backup MonthlyFull-Backup Yearly-Full-Backup (one panel)

Total Success Total Failure Total Recovered Total Running

So my need is when I onclick on 39 number (i.e as per my logic token Criteria = (Total Backup) and token
Tier would be taking value "Gold" and lists all 30 hosts should be displayed (corresponding to respective drilldown panel)

============================

My problem is how hide the rest panels unable to unset them when i click on 39 all the rest 3 panels are listed 9obviously with no results found)

Need: on evry number respective to criteria respective drilldown panel nly should come with lists of hosts rest all 3 panels should be hidden (this is what 'm unable to achieve)

0 Karma

kavyakanne
Engager

@gcusello could you assist me here please!

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @kavyakanne,
Could you describe what are your need and problem?

I see:

  • an html header,
  • a first row with a drilldown with conditions.
  • other two rows with only unset in drilldowns.

Why in the first drilldow do you set four tokens with the same value?
Why in the second and third drilldown there's only unset?

Ciao.
Giuseppe

0 Karma

kavyakanne
Engager

This is my table view (with muliptle appends) this keeps changing with a dropdown selection (Datacentre)

Criteria Gold Silver Bronze NOT in CMDB No SLA Defined
Total CI 180 95 147

Total Backup 39 33 8 1 3
Not Backedup 154 63 138

Daily-Incremental-Backup 23 30 8 0 3
Daily-Full-Backup 3 2 0 0 0
Weekly-Full-Backup 5 0 0 0 0
Monthly-Full-Backup 8 0 0 1 0
Total Success 30 32 8 0 3
Total Failure 8 0 0 1 0
Total Running 1 1 0 0 0

Total Backup Size (GB) 4966 836 63 361 31

I've written 4 drilldown panels
(Total Backup

Not Backedup
Daily-Full-Backup Weekly-Full-Backup MonthlyFull-Backup Yearly-Full-Backup (one panel)

Total Success Total Failure Total Recovered Total Running

So my need is when I onclick on 39 number (i.e as per my logic token Criteria = (Total Backup) and token
Tier would be taking value "Gold" and lists all 30 hosts should be displayed (corresponding to respective drilldown panel)

============================

My problem is how hide the rest panels unable to unset them when i click on 39 all the rest 3 panels are listed 9obviously with no results found)

Need: on evry number respective to criteria respective drilldown panel nly should come with lists of hosts rest all 3 panels should be hidden (this is what 'm unable to achieve)

0 Karma

kavyakanne
Engager

@richgalloway

Hello Rich

Could you assist me here on-click on any value it re-driects and nun the drilldown panel (t1 only)

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Sorry, but this is not something I can help with.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...