Splunk Search

How to enable drilldown for only one column in the table of multiple fields?

knanaiah001
Explorer

Hi,

Can someone suggest me on how to enable drilldown for specific column .
For example ,if i have 5 columns and i have to enable drilldown on 3rd column how this can be achieved 

Labels (1)
0 Karma

thambisetty
SplunkTrust
SplunkTrust
 <option name="drilldown">cell</option>
        <drilldown>
          <condition field="sourcetype">
            <set token="sourcetype">$click.value2$</set>
            </condition>
          <condition field="*">
          </condition>
 </drilldown>

The above code let user to drilldown only on field "sourcetype". The remaining fields will be clickable but no action will be taken because of "field=*"

————————————
If this helps, give a like below.
0 Karma

knanaiah001
Explorer

Any suggestions please?

0 Karma

vik
Explorer

Did you find any solution ? 

0 Karma

thambisetty
SplunkTrust
SplunkTrust

@vik Did you try my solution?

————————————
If this helps, give a like below.
0 Karma

vik
Explorer

@thambisetty  Yes, I tried your solution it helps. But I am also trying to have the link disabled for the rest of the columns. 

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...