Splunk Dev

Inject click.value to DateTimeRange from chart drilldown

h52huang
Path Finder

Hi, I am 1 week old to splunk. Using web-version. Need any generous help please.

I have a chart1 that drills down to a table1, upon clicking, passes the $click.value$ from chart1.

An example of my goal: from chart1, the $click.value$=15, then I want to set the dateTimeRange picker for table1 to 15:00:000 to 16:00:000. Then table1 will filter and only show events between 15-16:00 of a day.

Is above possible please? If yes, could anyone share more information about it please?

If not, then we might have to use query. I checked this example with question id 438520, sorry no enough points to post links..., but since I do not have input boxes as the example does, how do I convert those fields into query please?

Thanks a lot for any help.

Tags (1)
0 Karma

niketn
Legend

@h52huang, can you check whether your raw events have date_hour field (explore events in verbose mode with streaming command or only base search)? If you have date_hour field this drilldown becomes simple as you can apply base search filter date_hour=15 OR date_hour=16

Also it would be great if you can post your current searches for chart and table.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Splunk App for Anomaly Detection End of Life Announcement

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...