Dashboards & Visualizations

in-page Drill down in a dashboard

nathanluke86
Communicator

I have a single value panel which is generated from the spl below:

| inputlookup AD_User_LDAP_list where OU=Staff isDeleted=FALSE |stats count

I would like to drill down when clicked and display a list of users in another panel (the results of the spl below):

| inputlookup AD_User_LDAP_list where OU=Staff isDeleted=FALSE |table sAMAccountName

Can someone kindly explain how to do this

TIA

0 Karma

493669
Super Champion

Use below-

 <drilldown target="_blank">
       <link>
          /app/dashboard_examples/form_table2?form.sourcetype=$row.sourcetype$
        </link>
  </drilldown>   

Here target=_blank helps to move to another dashboard and dashboard link needs to be provied in link tag and add token of your sAMAccountName in the link itself.
Remember you have to display sAMAccountName in first dashboard table. because stats count will only show count. and sAMAccountName will be used as token for next dashboard.
You can install Splunk Dashboard Examples app from splunk base which has multiple useful example on drilldown. https://splunkbase.splunk.com/app/1603/

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...