Splunk Search

How to enable drilldown for only one column in the table of multiple fields?

knanaiah001
Explorer

Hi,

Can someone suggest me on how to enable drilldown for specific column .
For example ,if i have 5 columns and i have to enable drilldown on 3rd column how this can be achieved 

Labels (1)
0 Karma

thambisetty
SplunkTrust
SplunkTrust
 <option name="drilldown">cell</option>
        <drilldown>
          <condition field="sourcetype">
            <set token="sourcetype">$click.value2$</set>
            </condition>
          <condition field="*">
          </condition>
 </drilldown>

The above code let user to drilldown only on field "sourcetype". The remaining fields will be clickable but no action will be taken because of "field=*"

————————————
If this helps, give a like below.
0 Karma

knanaiah001
Explorer

Any suggestions please?

0 Karma

vik
Explorer

Did you find any solution ? 

0 Karma

thambisetty
SplunkTrust
SplunkTrust

@vik Did you try my solution?

————————————
If this helps, give a like below.
0 Karma

vik
Explorer

@thambisetty  Yes, I tried your solution it helps. But I am also trying to have the link disabled for the rest of the columns. 

0 Karma
Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...