Hey all:
I am fairly new to this. I have tried to set up a chart drilldown after which I can swap out the original search. I want to replace the original search with a new one based on the column I'm using which I ordered the chart. I found one article in the wiki that talks about this: http://docs.splunk.com/Documentation/Splunk/6.2.0/AdvancedDev/TableChartDrilldown#Swap_out_the_under..., but the example there is in Advanced XML. I can only edit the view using Simple XML. Thanks in advance!
Ivan
yes you can only edit the view using Simple XML with your searchs , and more with others modules ...
on this example of :
http://docs.splunk.com/Documentation/Splunk/6.2.0/AdvancedDev/TableChartDrilldown#Swap_out_the_under...
yes you can only edit the view using Simple XML with your searchs , and more with others modules ...
on this example of :
http://docs.splunk.com/Documentation/Splunk/6.2.0/AdvancedDev/TableChartDrilldown#Swap_out_the_under...
Try setting the drilldown option to new search . in the below, I just replaced index and sourcetype from click values
<drilldown>
<link>/app/search/search?q=index=$row.index$ sourcetype=$row.sourcetype$</link>
</drilldown>