filtering results by system

[galbrilovich]

Hi, Im trying to filter the results of some system in timechart and don't succeed to do that.
suppose i have 5 systems in the chart, i.e. there are 5 graphs in the chart.
i want to show only the graph of one or more systems by clicking on the graph or on the legend of the system.

how can i do it?

[gcusello]

Hi @galbrilovich,

download and install the "Splunk Dashboard Examples" App (https://splunkbase.splunk.com/app/1603/).

You'll find examples of how to set up a drilldown.

The example relevant for you is "In Page Drilldown with perma link".

Ciao.

Giuseppe

[galbrilovich]

thank you very much

[ITWhisperer]

You could have a dropdown or radio buttons or checkboxes to select the system you want and get them to set a token which you use to modify your query in your chart.

You could have a drilldown in your chart to set a token to modify your query or go to another dashboard.