Splunk Enterprise

Requesting help with capturing the fieldname

dnv007
Explorer

Hi Everyone! Hope you all are staying safe..

I am currently working on a splunk health dashboard which is using the Status indicator app and .js scripts.

1) The task at hand is to capture the fieldname. Referencing the screenshot(highlighted in yellow - Screenshot1), when clicking on "4268" it should capture the value "Anti Virus Protected". Since this is also the "split by" field i tried all options available like click.value,click.name2,click.name1 etc and none of them seem to capture the value "Anti Virus Protected".

dnv007_0-1605859793318.png

 



Could someone please help me in achieving this? And also help me understand why theclick.name,name2 etc is not working?

Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Can you share the SimpleXML you have used so far?

0 Karma

dnv007
Explorer

<code>

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Possibly doesn't support drilldowns? Have you tried other sorts of drilldown other than token setting?

0 Karma

dnv007
Explorer

I definitely do get the below warning:

dnv007_0-1605864156126.png

Could you elaborate on what you mean by "other sorts of drilldown" please? 

It is vital that i capture the fieldname cause i have to build further drilldowns that open on another tab that depend on the fieldname clicked.

Please suggest.

Thanks for your time.

 

 

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Other drilldowns could be links to other pages for example. Having said that, the warning message probably means these won't work either. Have you considered using a different visualisation such as "single" which might give you something close to what you have.

0 Karma

dnv007
Explorer

No haven't considered that! Could you please share any documentation or links to the "single" you are referring to please? An aspiring developer.. please pardon me..

Also, is there any way i could achieve the same through .js maybe?  

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

LMGTFY 

0 Karma

dnv007
Explorer

Thank you! But this might not work as there are many other requirements it does not match.. Thank you so much for your time and quick responses.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...