Hello,
I have a report, which produces a table as a result.
Now, I would like to click on a given field in the result and execute the second report passing the value of this field as a parameter.
How would I achieve this?
Preferably I would like to keep it simple (report1 --> result table --> click on entry --> call report2), without building dashboards if possible.
Kind regards,
Kamil
Hi @damucka,
a report is static so you cannot have drilldown from it.
If you want to drilldown, you have to create a dashboard panel using the same search of the report.
Then you can drilldown in another dashboard or in the same dashboard passing tokens $row.fieldname$
.
For more details see the Splunk Dashboard Examples App ( https://splunkbase.splunk.com/app/1603/ ).
Ciao.
Giuseppe