Splunk Dev

How to create a drilldown for a single value panel to show more details?

spoo
Explorer

I'm trying to create a drilldown for a single value panel. I want my user to be able to click on the value, and it will load new panel with all details. I have set token but not sure where to pass in detailed panel so that drill down works.

PFA :
here is my single value panel query
| eval A = if(DURATION>30, "Long Duration Jobs","Duration")
| stats count by A | where A="Long Duration Jobs"

----

 i have another panel which shows details of these long duration jobs:

| eval Duration = if(DURATION>30, "Long Duration Jobs", "Duration")
| search Duration = "Long Duration Jobs"
| rename EXEC_DATE_TIME as Datetime SERVER_NAME as "System Name" JOB_NAME as "Job Name" STATUS_NAME as "Status" EXEC_DATETIME as "Execution Datetime" DURATION as "Duration(s)" DELAY as "Dealy(s)" JOB_COUNT as "Job Count" JBCREATED_BY as "Job Createdby " SDL_DATETIME as "SDL Datetime"
| table Datetime "System Name" "Job Name" "Execution Datetime" "Status" Duration "Duration(s)" "Dealy(s)" "Job Count" "Job Createdby" "SDL Datetime"

How to connect these 2 panles so that when i click on single value, the detailed panel should pop up. Please suggest

 

 

 

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...