Splunk Search

How to create a drilldown based on the clicked row in a stats table?

Contributor

I have this stats table
alt text

This is the search that creates it:

index="nitro_application_summary" earliest=-1h@m latest=@m [| `nitro_prod_cmdb` | search Category="*"  Service="*" Application="*" | stats count by Application | table Application] | join Application [ | `nitro_prod_cmdb_service_app_relationships` ] | search Alert_Type="*" Metric_Category="*" | eval FilterKey=Description.ID | dedup FilterKey | table Alert_Type Category Service Application Metric_Category Description Key ID| rename Metric_Category as "Type" Alert_Type as "Alert" count as Count | sort +Alert

I want it so when I click the row, it grabs the category of the row I am clicking and inserts that into the URL
This is my drill down in the XML

      <link>
        <![CDATA[
            /app/nitro_app_summary/nitro_summary_details_view_sideview?Category= (This is where I want whatever is in the category section)
         ]]>
      </link>
    </drilldown>

Any ideas? I do not want to use drop-downs or any selection tools. I want to be able to just click on the row and for it to open based on the category.

0 Karma
1 Solution

Legend

Try this

       <link>
         <![CDATA[
             /app/nitro_app_summary/nitro_summary_details_view_sideview?Category=$row.category$
          ]]>
       </link>
     </drilldown>

http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/tokens#Define_tokens_for_dynamic_drilldown

View solution in original post

0 Karma

Legend

Try this

       <link>
         <![CDATA[
             /app/nitro_app_summary/nitro_summary_details_view_sideview?Category=$row.category$
          ]]>
       </link>
     </drilldown>

http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/tokens#Define_tokens_for_dynamic_drilldown

View solution in original post

0 Karma

Contributor

That was easy, thanks for the fix!

0 Karma