Hi
From the code below, I display a pie chart in order to display the top 10 of EventCode
index="toto" sourcetype=tutu EventCode=* (Level=1 OR Level=2 OR Level=3)
| fields _time host EventCode
| eval time = strftime(_time, "%m/%d/%Y %H:%M")
| stats count(host) as "Number of EventCode" by EventCode
| sort -"Number of EventCode"
| head 10
Now, I need to open a drilldown when I click on a slice of the pie chart
I modified my xml like this but it doesnt works
<init>
<set token="EventCode">*</set>
</init>
<drilldown>
<set token="EventCode">$click.value$</set>
<link target="_blank">/app/titi/eee</link>
</drilldown>
Could you help me please?
What does not work?
The <drilldown> section needs to be part of the dashboard <chart> element.
Does the drilldown open up a new page and not find the target or does the drilldown not happen.
You will also need the following as part of the <chart> definition
<option name="charting.drilldown">all</option>
Hope this helps
What does not work?
The <drilldown> section needs to be part of the dashboard <chart> element.
Does the drilldown open up a new page and not find the target or does the drilldown not happen.
You will also need the following as part of the <chart> definition
<option name="charting.drilldown">all</option>
Hope this helps