drilldown

[splunkpoornima]

hi all,

i have a list of some 50 source files like

taskmanager_log(1)

gpoor_tomca_log

srp_log4j

..

what i want is if clik any source file i want to run this search query as

Ex: source="taskmanager_log(1)"|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration

[Leo]

<?xml version='1.0' encoding='utf-8'?>
<dashboard>
<row>
<table>
<searchTemplate>
          ...search returning list of your sources...
</searchTemplate>
<drilldown>
<link>/app/search/flashtimeline?q=source=$row.source$|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration</link>
</drilldown>
</table>
</row>
</dashboard>

[splunkpoornima]

to fetch the list of sources i used index=*|chart values(sources) by index..

but when i click the source value ..in the search bar it shows

index=*|index="xx"

but the source is not displaying and also the query is also not coming