Pie chart drilldown help

[pinzer]

Hi all, i need to change the search query when clicking on a slice of the pie chart. I need to add "| where " to the standard query. How can i do this? thanks

[sideview]

The link Felix mentioned is a good one. http://www.splunk.com/base/Documentation/latest/Developer/TableChartDrilldown#Swap_out_the_underlyin...

And if you want more details check out the 'UI Examples for 4.1' app on splunkbase, which has a lot of different examples of drilldown patterns, from simple configurations to what it calls 'custom wiring' configurations like this one. You may be able to get more out of the app's discussion on these topics than from the docs.

[ftk]

There is a section in the documentation that covers this with an example: http://www.splunk.com/base/Documentation/latest/Developer/TableChartDrilldown#Swap_out_the_underlyin...