Splunk Enterprise

Help to pass a drilldown token

jip31
Motivator

hello

In a first dashboard, I have a dropdown list

 

 

 <input type="dropdown" token="site" searchWhenChanged="true">
      <label>Espace</label>
      <fieldForLabel>site</fieldForLabel>
      <fieldForValue>site</fieldForValue>
      <search>

 

 

so when I chosse a site value, the dashboard is updated with the selected site

now I want to drilldown on another dashboard from the selected site like this

 

 

<link target="_blank">/app/spl_pu/test?form.$site$=$click.value$</link>

 

 

In the second dashboard, i try to call the token like this but it doesnt works

 

 

| search site="$site$"

 

 

could you help please?

Labels (1)
Tags (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

The only thing you have in your single is a number, which is what you are passing with $click.value$ in the drilldown. Change the drilldown in the first dashboard to this

<drilldown>
          <link target="_blank">/app/spl_publication_dashboard/agents_bpe_v4?form.site=$form.site|u$</link>
        </drilldown>

View solution in original post

jip31
Motivator
Here is the XML of the first dash
 
And the XML of the second dash
 
As you can see in the first dash, I want to retrieve the value selected from the dropdown list (line 97) and to drilldown this value in another dashboard (line 157)
In the second dash, i try to catch this value in a dropdown list (line 12) or in a input test (line 22) but idealy I need to be able to filter directly the result of the single panel (line 43) from the value selected in the first dash
thanks for your help
 
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

OK so why haven't you made the changes I suggested?

0 Karma

jip31
Motivator

I have tested it but it doesnt works

thats the reason why you can see your code

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

This is the code you posted

ITWhisperer_0-1661856291596.png

As you can clearly see, it does not have the change I suggested.

0 Karma

jip31
Motivator

I understand but I have already test you code in a previous time and like Isaid it doesnt works

not sure your undesrtand my needs

I have a dropdown list with a token called "site"

when I a doing  choice in this dropdown list, I try a way to drilldown the events in my second dashboard with the value selected in the dropdown list

thats the reason why in the example I sent to you, site is between $...$

  <link target="_blank">/app/spl/test?form.$site$=$click.value$</link>

while in your example site is not between $....$

  <link target="_blank">/app/spl/test?form.site=$click.value$</link>
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What is the token in your second dashboard called?

0 Karma

jip31
Motivator

Is anybody can help please?

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try:

<link target="_blank">/app/spl_pu/test?form.site=$click.value$</link>

You may also need to do:

| search site="$form.site$"
0 Karma

jip31
Motivator

it doenst works

when I have a look to the URL of the second dashboard after the drilldown launching, the site in the URL is well the site selected in the first dashboard

But if I run the single panel in the second dashboard, the site is different from the site selected in the first dashboard

for example, if I have this in my first dashboard

jip31_0-1661772556663.png

you can see that the token pass in the URL of the second dashboard

jip31_1-1661772794347.png

but if I want to retrieve the token in a panel or in an text input of the second dash, it's not the good token....

jip31_2-1661772879189.png

 

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What is the drilldown code SimpleXML that you have used for this in your first dashboard?

0 Karma

jip31
Motivator

in the second dashboard I try to update the panel with

 | search site="$form.site$"
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You don't seem to have understood my question or perhaps you just don't understand how your dashboard code works?

From the code that you posted

ITWhisperer_0-1661857836751.png

The name of the token in the second dashboard is "site"

In order to reference and change this token when the dashboard is loaded by the drilldown link, you have refer to is as form.site not form.$site$

Hence, the drilldown link in the first dashboard should be something like

 <link target="_blank">/app/spl/test?form.site=$click.value$</link>

 

0 Karma

jip31
Motivator

I dont understand anything

First dash :

dropdown list :

 <input type="dropdown" token="site" searchWhenChanged="true">
      <label>Espace BP</label>
      <fieldForLabel>site</fieldForLabel>
      <fieldForValue>site</fieldForValue>
      <search>

 link for drilldown

  <drilldown>
          <link target="_blank">/app/spl_publication_dashboard/agents_bpe_v4?form.site=$click.value$</link>
        </drilldown>

second dash

i try to retrieve in another dropdown list the value selected in the first dropdown list

    <input type="dropdown" token="form.site" searchWhenChanged="true">
      <label>Espace BP</label>
      <fieldForLabel>form.site</fieldForLabel>
      <fieldForValue>form.site</fieldForValue>
      <search>
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

For the drilldown, since this is a URL, you should ensure that the token in url-encoded

<drilldown>
          <link target="_blank">/app/spl_publication_dashboard/agents_bpe_v4?form.site=$click.value|u$</link>
        </drilldown>
0 Karma

jip31
Motivator

unfortunately, it changes nothing

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

What URL do you get in the address bar when you link to the second dashboard?

0 Karma

jip31
Motivator

In the first dash, if i choose "Espace Perpignan" in the dropdown list, here is a piece of the link

form.site=Espace%20Perpignan

 but when I run the drilldown, the site which is displayed is different....

Here is the url piece of the second drilldown 

agents_bpe_v4?form.site=Espace%20Blagnac

 

 

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try making the dropdown in the second dashboard the same as the dropdown in the first dashboard

0 Karma

jip31
Motivator

If i do this :

I can retrieve the result of the value of the single panel

jip31_1-1661948271600.png

in the dropdown list and the input text of the second dashboard

jip31_0-1661947955506.png

But the dropdown list and the input text are both just for a test and for this test I would prefer to display the name of the site instead the result on the dropdown list choice (I dont know if it is possible)

Now the last thing I want to do is to filter the events in a panel of the second dashboard from the choice selected from the dropdown list of the first dashboard

It means that if I choose "toto" in the dropdown list of the first dashboard, I need to filter the events in the single panel of the second dashboard by "toto"

so I am doing this 

 | search site="$form.site$"

but it doenst works because when I run the search you can see that it's the value result which is searched instead the name of the site

 | search site="3.00"

 

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

The only thing you have in your single is a number, which is what you are passing with $click.value$ in the drilldown. Change the drilldown in the first dashboard to this

<drilldown>
          <link target="_blank">/app/spl_publication_dashboard/agents_bpe_v4?form.site=$form.site|u$</link>
        </drilldown>
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...