Splunk Enterprise

Carry forward top dashboard filter values while navigating to next dashboard

architkhanna
Path Finder

Hello ,

I have 5 dashboards in a Splunk Application with same set of filters on top of them.
I am trying to figure out a way in which , If a user choses some filters on first dashboard , and they navigate to next dashboard, same filters values should remain intact and be applied again.  And this should continue with subsequent filter change and dashboard changes.

Not sure if at all this feature is possible in splunk or if anyone has done this before.
Would like to hear some ideas on the same.

Thanks in advance!



Labels (2)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

In your navigation to subsequent dashboards, add 

&form.varname=$varname|n$

where varname is your input form token

i.e. link this in the drilldown

<drilldown>
  <link target="_blank">new_dashboard?form.time_range.earliest=$time_range.earliest$&amp;form.time_range.latest=$time_range.latest$&amp;form.index=$row.index$</link>
</drilldown>
 

which passes the time picker earliest and latest with the time picker token name 'time_range' and a drilldown row value of index to the new_dashboard.

 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...