@sahana
Try this.
<dashboard>
<label>Drilldown By Value</label>
<row>
<panel>
<table>
<search>
<query>| makeresults | eval _raw="Function_Name,Success,Failure,SLA
greet,34,5,13.5
NGA,43,0,67.5
Customer,54,1,45" | multikv forceheader=1
| table Function_Name Success Failure SLA</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">cell</option>
<drilldown>
<condition match="$click.name2$ =="Failure"">
<set token="flag">Failure Clicked. Value = $click.value2$</set>
</condition>
<condition match="$click.name2$ =="SLA"">
<set token="flag">SLA Clicked. Value = $click.value2$</set>
</condition>
<condition>
<unset token="flag" />
</condition>
</drilldown>
</table>
</panel>
</row>
<row>
<panel>
<html>$flag$</html>
</panel>
</row>
</dashboard>
Please refer below link for more info.
https://docs.splunk.com/Documentation/Splunk/8.2.5/Viz/DrilldownIntro
Thanks
KV
If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.
