How to pass fields as tokens from one panel to other panels on the same dashboard?

[clintla]

Not finding any examples so far, but not sure if it's possible.

Wanting to have one dashboard panel that has a result, say 4 values in FIELD1, & then I want to use all the values found & pass to all the other dashboard panels as a token to search for.

It would even be cool to click on a value in FIELD1 & then have it populate to the rest of the dashboards.

Is this possible & straight forward to do?

[somesoni2 · Accepted solution]

What you seek is called Contextual drilldown OR IN-page drilldown in Splunk. See following link for details and working sample.

http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/Understandbasictableandchartdrilldownactions#C...

You can also see the it's example in Drilldown section of the Splunk 6 Dashboard Example App.

[sundareshr]

You can either have the 4 values in a dropdown or in a Link List.

Start here: http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/tokens#Define_tokens_for_form_inputs

If this doesn't help, share your dashboard code

[clintla]

All this info was great.. got it all working.. thanks!

[snoobzilla]

In short, yes, it is possible. I have dashboards where you click on any of 3 charts/tables to select what is broken out in another 2 panels.

The documentation provided above should get you started. There is a learning curve... but not too bad. I would take a look at the Splunk example dashboards too.