How to set up a chart drilldown in Simple XML so a new search is used based on a selected column?

[ivtashev]

Hey all:

I am fairly new to this. I have tried to set up a chart drilldown after which I can swap out the original search. I want to replace the original search with a new one based on the column I'm using which I ordered the chart. I found one article in the wiki that talks about this: http://docs.splunk.com/Documentation/Splunk/6.2.0/AdvancedDev/TableChartDrilldown#Swap_out_the_under..., but the example there is in Advanced XML. I can only edit the view using Simple XML. Thanks in advance!

Ivan

[fdi01 · Accepted solution]

yes you can only edit the view using Simple XML with your searchs , and more with others modules ...
on this example of :
http://docs.splunk.com/Documentation/Splunk/6.2.0/AdvancedDev/TableChartDrilldown#Swap_out_the_under...

[renjith_nair]

Try setting the drilldown option to new search . in the below, I just replaced index and sourcetype from click values

          <drilldown>
            <link>/app/search/search?q=index=$row.index$ sourcetype=$row.sourcetype$</link>
          </drilldown>