Dashboards & Visualizations

in-page Drill down in a dashboard

nathanluke86
Communicator

I have a single value panel which is generated from the spl below:

| inputlookup AD_User_LDAP_list where OU=Staff isDeleted=FALSE |stats count

I would like to drill down when clicked and display a list of users in another panel (the results of the spl below):

| inputlookup AD_User_LDAP_list where OU=Staff isDeleted=FALSE |table sAMAccountName

Can someone kindly explain how to do this

TIA

0 Karma

493669
Super Champion

Use below-

 <drilldown target="_blank">
       <link>
          /app/dashboard_examples/form_table2?form.sourcetype=$row.sourcetype$
        </link>
  </drilldown>   

Here target=_blank helps to move to another dashboard and dashboard link needs to be provied in link tag and add token of your sAMAccountName in the link itself.
Remember you have to display sAMAccountName in first dashboard table. because stats count will only show count. and sAMAccountName will be used as token for next dashboard.
You can install Splunk Dashboard Examples app from splunk base which has multiple useful example on drilldown. https://splunkbase.splunk.com/app/1603/

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...