hide textbox and search button in drilldown

[SrinivasaC]

--In my drill down resultant form shown below.
-- It is creating input text box with search button.
-- my requirement is not to show "input text box" and "search" button. only required results on drilldown resultant form.

Username sourcetype=logins $username$

100

Thanks in advance.. 🙂

[ehudb]

Apparently you can do it very easily by:

• Reference your token in the target dashboard as any token: search index=... field=$token$
  • Use the url to give value to the token searchhead:8000/en-US/app/search/mytarget?token=value1 searchhead:8000/en-US/app/search/mytarget?token=value2

So you don't have to create input in the dashboard for the token to work.

[sowings · Accepted solution]

Use <drilldown> markers to define your own form as output, one that doesn't have the search text box. (In other words, just a dashboard that takes a query from the URL bar.)

See here for more details:

http://docs.splunk.com/Documentation/Splunk/latest/Viz/Dynamicdrilldownindashboardsandforms

[sowings]

The base search within the dashboard is what will display unless you provide some additional data. When the target is a <dashboard>, you have to feed the whole search string as q= in the drilldown link. Since you're typically reaching the target dashboard by clicking on something, the username to search for is provided by the drilldown mechanism. If you go to the dashboard without any input (i.e., not clicked from somewhere else), you'll get the results from whatever search is written into the dashboard itself.

[SrinivasaC]

Thanks Sowings...
I'm surprised when I test above code snippet with your answer, i.e I have removed $username$ in target dashboard. its showing all the results without condition. But I wanna show result for particular selected user only.. Plz help me.

[sowings]

<drilldown>
<link>
/app/MyApp/individual_customer_details?q=sourcetype%3dlogins $click.value$
</link>
</drilldown>

You might have to put the link inside a CDATA because of the equals sign. See the link below for details:

http://docs.splunk.com/Documentation/Splunk/latest/Viz/Dynamicdrilldownindashboardsandforms

[sowings]

Ah, sorry. The drilldown target should be set as a <dashboard> -- this type of visualization doesn't have a search button or anything like that. You'll want to send the entire search string to the target view as "q=". Note that you can't use searchTemplate in a dashboard, you'll have to make it a searchString as a child of the <event> element.

[SrinivasaC]

--In my drill down resultant form shown below.
-- It is creating input text box with search button.
-- my requirement is not to show "input text box" and "search" button. only required results on drilldown resultant form.

Username sourcetype=logins $username$

100

Thanks in advance.. 🙂

[SrinivasaC]

Thanks for your reply Sowings...

Actual my drilldown page as below:

User Salary Details by Yearly

column


/app/MyApp/individual_customer_details?form.username=$click.value$

With the above code in drilldown, it is displaying input text field and search button. But I dont need of those, Jus result need to display for particular customer.