Splunk Search
Highlighted

How to pass fields as tokens from one panel to other panels on the same dashboard?

Communicator

Not finding any examples so far, but not sure if it's possible.

Wanting to have one dashboard panel that has a result, say 4 values in FIELD1, & then I want to use all the values found & pass to all the other dashboard panels as a token to search for.

It would even be cool to click on a value in FIELD1 & then have it populate to the rest of the dashboards.

Is this possible & straight forward to do?

Highlighted

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

Legend

You can either have the 4 values in a dropdown or in a Link List.

Start here: http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/tokens#Define_tokens_for_form_inputs

If this doesn't help, share your dashboard code

0 Karma
Highlighted

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

Builder

In short, yes, it is possible. I have dashboards where you click on any of 3 charts/tables to select what is broken out in another 2 panels.

The documentation provided above should get you started. There is a learning curve... but not too bad. I would take a look at the Splunk example dashboards too.

0 Karma
Highlighted

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

Communicator

All this info was great.. got it all working.. thanks!

0 Karma
Highlighted

Re: How to pass fields as tokens from one panel to other panels on the same dashboard?

SplunkTrust
SplunkTrust

What you seek is called Contextual drilldown OR IN-page drilldown in Splunk. See following link for details and working sample.

http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/Understandbasictableandchartdrilldownactions#C...

You can also see the it's example in Drilldown section of the Splunk 6 Dashboard Example App.

View solution in original post

0 Karma