Splunk Search

Drill down using multiple conditions

kallisrayar1986
Path Finder

I have a pie chart with multiple slices, clicking on each slice will take you to Custom URL, please see the simple xml below:
Unfortunately it takes me to the same URL which is at the top,again and again. I even tried keeping this condition in one drilldown but still it did not work. Please help..

      <condition value="Media Content (Bytes)">
        <link>URL1</link>
        </condition>          
    </drilldown> 
    <drilldown>
      <condition value="Text Content (Bytes)">
             <link>URL2</link>    
       </condition>
    </drilldown>   
Tags (2)

martin_mueller
SplunkTrust
SplunkTrust

That's not going to work, the value attribute is only valid in the input context of the condition element, not in the drilldown context: http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#condition_.28dr...

The only thing you can condition on here is the field name that was clicked, which in a pie is always the same field.

A possible workaround would be to have a small script on some web server that gets passed the clicked value in a parameter and then redirects to the appropriate URL.
Another possibility would be to add a custom JS event handler that suppresses the default drilldown and instead does its own logic.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

There are plenty of custom JS examples here: https://apps.splunk.com/app/1603/ Not sure if they go far enough though.

0 Karma

kallisrayar1986
Path Finder

Could you please share some samples for Custome JS event for this scenario, if any?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...