Knowledge Management

What is the correct token for trellis title category?

Path Finder


I have a bar chart in trellis mode


The categories (LABEL 1 and LABEL 2) are obtained by aggregation



| timechart span=1h limit=0 c(eval(type_produit="LABEL 1")) as "LABEL 1" c(eval(type_produit="LABEL 2")) as "LABEL 2" by VALEUR



I have drilldown on this trellis and when I click on a part of the barchart, I want to catch the category of my selection (LABEL 1 or LABEL 2).

But I can't find the correct token to use.

I try these one :

$$ => _time

$click.name2$ => name of VALEUR field

$click.value$ => 1658833200 (value of _time)

$click.value2$ => value of VALEUR field

$$ => the token is not recognized (it stays $$)

$trellis.value$ => the token is not recognized (it stays $trellis.value$)


Any idea ?

Thanks in advance

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...