I have a lookup file that contains the name, ID, Latitude and Longitude of all our branches. I have designed a map to locate all the branches on the map. I need to drilldown on-click by capturing the Branch_ID from the list and open another existing dashboard where I can see more details of that branch.
The problem I have is that I cannot select one Branch_ID. Any help? While I click on the dot on the map it opens the other dashboard and tries to search for "null" in the form. Hope I am not confusing.
Below is the query I use:
|inputlookup branchINFO |fields BranchNumber, BranchName, SITELATD, SITELGTD | geostats latfield=SITELATD longfield=SITELGTD count by BranchName globallimit=0 maxzoomlevel=18
Below is the drilldown code:
That's going to be a defined behavior in the particular map visualization that you are using - it's aggregating the individual dots/flags rather than maintaining them as individual units.
You might try the Clustered Single value map visualization and see if its behavior meets your needs. https://splunkbase.splunk.com/app/3124/
There are also a number of other map options discussed here - https://www.splunk.com/blog/2017/01/10/dashboard-digest-series-episode-5-maps.html
Thanks, unfortunately, I'm using enterprise Splunk within our industry with very limited accessibility over the config files and no privilege to add any new app to Splunk platform.
Overall all I need is to be able to click on a single point on the map, capture either the BranchID or branchName (only one) and past it to the other dashboard. I have pasted the query with drilldown code in the above comments.
Any help would be much appreciated!