Splunk Enterprise

Carry forward top dashboard filter values while navigating to next dashboard

architkhanna
Path Finder

Hello ,

I have 5 dashboards in a Splunk Application with same set of filters on top of them.
I am trying to figure out a way in which , If a user choses some filters on first dashboard , and they navigate to next dashboard, same filters values should remain intact and be applied again.  And this should continue with subsequent filter change and dashboard changes.

Not sure if at all this feature is possible in splunk or if anyone has done this before.
Would like to hear some ideas on the same.

Thanks in advance!



Labels (2)
0 Karma

bowesmana
SplunkTrust
SplunkTrust

In your navigation to subsequent dashboards, add 

&form.varname=$varname|n$

where varname is your input form token

i.e. link this in the drilldown

<drilldown>
  <link target="_blank">new_dashboard?form.time_range.earliest=$time_range.earliest$&amp;form.time_range.latest=$time_range.latest$&amp;form.index=$row.index$</link>
</drilldown>
 

which passes the time picker earliest and latest with the time picker token name 'time_range' and a drilldown row value of index to the new_dashboard.

 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...