Splunk Search

How to change the data in a table after clicking on bar graphs?

danielcmarcosjr
Explorer

Hello,

I would like to ask, how to do this in Splunk:
If you have a chart (bar graphs) and a table with data.
If I click in bar graph, the table only displays the records related to the data displays in the bar graph. Is it possible in Splunk?
BTW, I am using HTML form. Thank you!

Tags (4)
0 Karma

niketn
Legend

@danielcmarcosjr, would it be possible for you to add some data field and search query examples?

There are multiple ways this could be done, for example code the chart drilldown event and set the chart clicked values as token, to be used by the table. You would have to do this in XML and convert to HTML for convenience.

Please refer to the Splunk 6.x Dashboard Examples app from Splunkbase for all Drilldown Elements examples.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

somesoni2
Revered Legend

What you need is the in-page drilldown. See the example of "set" in below link.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/PanelreferenceforSimplifiedXML#set

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...