ITSI Glass Table Custom URL Drilldown

[rijutha]

I have a glass table that drillsdown to a custom URL which is a dashboard in another splunk app.

I am trying to get the time range - earliest and latest passed to the drilldown URL so when then user drillsdown from the glass table to the custom dashboard the results are for the same time range as the glass table.

I have tried adding the below in my drilldown url:

form.time.earliest=$earliest$&form.time.latest=$latest$
form.time.earliest=$form.earliest$&form.time.latest=$form.latest$
form.time.earliest=$time.earliest$&form.time.latest=$time.latest$
form.time.earliest=$_time.earliest$&form.time.latest=$_time.latest$

time is the token used for the timepicker in the custom dashboard.

None of the above pass the time range values to the drilldown dashboard.

As none of these tokens refer the actual time range selected in the glass table.

Could anyone please help me understand how I can do this?

[krunoslav]

Is it possible to get other values in the URL? I have a table displaying some search results and I want to have a drilldown to search further based on a cell value. I tried stuff like $click.value$, but it doesn't work

[richgalloway]

@krunoslav To ask a new question, please post a new question rather than add on to an existing question.

[esnyder_splunk]

Looks like the classic glass tables don't support passing parameters along with drilldown URL. Although I can see how we try to hardcode earliest and latest args in dashboard drilldown URL. Latest would take whatever was selected in the global time picker. Earliest is the value selected for the widget. So in theory it would just pass the right time range without having to specify anything.

We do support parameters for beta glass tables. it looks like 'http://splunk.com?$TimeRange.earliest$'. I would suggest checking out the beta glass table editor: https://docs.splunk.com/Documentation/ITSI/latest/User/BuildbetaGT