Hello ,
I have 5 dashboards in a Splunk Application with same set of filters on top of them.
I am trying to figure out a way in which , If a user choses some filters on first dashboard , and they navigate to next dashboard, same filters values should remain intact and be applied again. And this should continue with subsequent filter change and dashboard changes.
Not sure if at all this feature is possible in splunk or if anyone has done this before.
Would like to hear some ideas on the same.
Thanks in advance!
In your navigation to subsequent dashboards, add
&form.varname=$varname|n$
where varname is your input form token
i.e. link this in the drilldown
<drilldown>
<link target="_blank">new_dashboard?form.time_range.earliest=$time_range.earliest$&form.time_range.latest=$time_range.latest$&form.index=$row.index$</link>
</drilldown>
which passes the time picker earliest and latest with the time picker token name 'time_range' and a drilldown row value of index to the new_dashboard.