Splunk Search

How to change the data in a table after clicking on bar graphs?

danielcmarcosjr
Explorer

Hello,

I would like to ask, how to do this in Splunk:
If you have a chart (bar graphs) and a table with data.
If I click in bar graph, the table only displays the records related to the data displays in the bar graph. Is it possible in Splunk?
BTW, I am using HTML form. Thank you!

Tags (4)
0 Karma

niketn
Legend

@danielcmarcosjr, would it be possible for you to add some data field and search query examples?

There are multiple ways this could be done, for example code the chart drilldown event and set the chart clicked values as token, to be used by the table. You would have to do this in XML and convert to HTML for convenience.

Please refer to the Splunk 6.x Dashboard Examples app from Splunkbase for all Drilldown Elements examples.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

somesoni2
Revered Legend

What you need is the in-page drilldown. See the example of "set" in below link.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/PanelreferenceforSimplifiedXML#set

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...