Developing for Splunk Enterprise

How to create a drilldown for a single value panel?

jravida
Communicator

Hi folks,

I'm trying to create a drilldown for a single value panel, but it doesn't seem to be in the options. I just want my user to be able to click on the value, and it will take him/her to another dashboard, as I have with other types of panels, like the pie chart. There would be no token or anything to pass. It would just bring the user to another existing dashboard (drilldown link), that is related to the value. I don't see anything in the options, and searches here didn't have results.

0 Karma
1 Solution

somesoni2
Revered Legend

You're correct, the drilldown is not available with Single value panel. And since you just want to redirect to different dashboard, this is gonna just work fine for you. You can set the dashboard to be displayed for underlabel and afterlabel.

<single>
        <title>Single Value Drilldown</title>
        <search>
          <query>index=_internal | stats count</query>
          <earliest>$timerange.earliest$</earliest>
          <latest>$timerange.latest$</latest>
        </search>
        <option name="drilldown">all</option>
        <option name="afterLabel">Click Here</option>
        <option name="underLabel">OR Click Here</option>
        <option name="linkFields">underlabel, afterlabel</option>
        <option name="linkView">YourSecondDashboard</option>
      </single>

View solution in original post

somesoni2
Revered Legend

You're correct, the drilldown is not available with Single value panel. And since you just want to redirect to different dashboard, this is gonna just work fine for you. You can set the dashboard to be displayed for underlabel and afterlabel.

<single>
        <title>Single Value Drilldown</title>
        <search>
          <query>index=_internal | stats count</query>
          <earliest>$timerange.earliest$</earliest>
          <latest>$timerange.latest$</latest>
        </search>
        <option name="drilldown">all</option>
        <option name="afterLabel">Click Here</option>
        <option name="underLabel">OR Click Here</option>
        <option name="linkFields">underlabel, afterlabel</option>
        <option name="linkView">YourSecondDashboard</option>
      </single>

jravida
Communicator

Perfect, you are a Splunk god and my boss is gonna be happy!

vrmandadi
Builder

@somesoni2

How can you make this drilldown to go to a new window?

0 Karma

somesoni2
Revered Legend

I don't believe there was any option with this construct (linkView, Splunk 6.3 or before). However, If you're using Splunk 6.4+, you get <drilldown> element as child of single value visualization which allows target attribute to open drilldown in new/same window. http://docs.splunk.com/Documentation/Splunk/6.4.0/Viz/PanelreferenceforSimplifiedXML#drilldown

0 Karma

manish_singh_77
Builder

@somesoni2

Quick question regarding the same topic,

Can I pass label name of the single value panel to another dashboard in the form text ?

0 Karma
Get Updates on the Splunk Community!

REST API Endoint to create correlation search

Hello, Is it possible to create correlation search in splunk ES app using REST API?

Does Splunk SOAR support mTLS

In the context of connecting Splunk Cloud and Phantom. Does Phantom/Splunk SOAR support mTLS?

Should our Deployment Servers have the Search Head server role on them?

all of our stuff is on premcurrently our dedicated Deployment Servers also have the Search Head role on them, ...