Splunk Search

Timechart dynamic drilldown

Bhuavana
Explorer

Hi,

I have a timechart as my first dashboard to display all the exception types over the time and below query is used

index=test | exception_type=* | timechart count by exception_type

From above chart i need take the exception_type as input field when i click on the dashboard line.

Please share any sample code for the same.

Also how to retreive the selected value as input type in next dashboard[to display in text box]

0 Karma

Venkat_16
Contributor

Hi Bhuavana,

In the below code I have performed the dynamic drilldown by passing the exceptiontype as token. You just need to include the stanza ..

<chart>
 <searchString>index=test exception_type=* | timechart count by exception_type</searchString>
 <earliestTime>0</earliestTime>
 <latestTime>now</latestTime>
 .....
 <drilldown>
   <link>/app/your_app_name/your_next_dashboard?form.exceptiontype=$click.name2$</link>
 </drilldown>
</chart>
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...