How to configure a drilldown for a dashboard selecting the option "Link to custom URL" from the UI?

[sricula]

Hi, I am trying to configure a drilldown for a dashboard selecting the option "Link to custom URL" from the UI.

The link is basically a splunk search, idea being when a user clicks on the bar chart, a corresponding search page opens up based on the row where the user clicked. So the name of the row is dynamic/clickable.

To pass the row name to the search query I have tried multiple in-built tokens, $click/name/row.value/value2$ and more. When I click on a row this token is not processing. It stays click.value2 or whatever is used.

example search query:

index=abcd sourecetype="stype" field1=$click.value$

On the Barchart x-axis is field1, when I hard code a value into the search query it works great. When using token I get no results.

Any suggestions what I am doing wrong or can try differently. Thanks in advance !!

[sricula]

@richgalloway Thanks for the reply. So the "Link to custom URL" feature does not support dynamic values?

[richgalloway]

Yes, it does support dynamic values.  The content of $click.value2$ is dynamic.

[sricula]

Well that is where I am using $click.value$

May be I was not clear, the URL in the "link to custom URL" opens a new tab with a search query which is part of the URL. One of the fields in this query is dynamic based on what is clicked. But when the new tab opens the search does not return anything because $click.value$ is not processed. When I hard code it, works fine and I get results back.

[richgalloway]

The drilldown URL is created by the dashboard. All token substitutions happen at that time, not in the target search query.  The target query has no idea what "$click.value$" is.

<drilldown>
  <link target="_blank">https://example.com?foo=$click.value$</link>
</drilldown>

See https://docs.splunk.com/Documentation/Splunk/9.0.4/Viz/DrilldownLinkToURL for more information.