Splunk Search

Timechart dynamic drilldown



I have a timechart as my first dashboard to display all the exception types over the time and below query is used

index=test | exception_type=* | timechart count by exception_type

From above chart i need take the exception_type as input field when i click on the dashboard line.

Please share any sample code for the same.

Also how to retreive the selected value as input type in next dashboard[to display in text box]

0 Karma


Hi Bhuavana,

In the below code I have performed the dynamic drilldown by passing the exceptiontype as token. You just need to include the stanza ..

 <searchString>index=test exception_type=* | timechart count by exception_type</searchString>
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...