Splunk Search

Using bar dashboard with drilldowns > link to search > custome (with $click.value$ variable)

aneyraba
New Member

I am trying to use the Drilldown on Click >  Link to Search > custom :

LOGRC_TYPE=F8 | eval FUNC_TRAN =AFI_LOG03FUN+"-"+AFI_LOG03TRN

| eval temp=if("$click.value$"=="REPL-(batch) ","REPL-          ",FUNC_TRAN)

| search temp="$click.value$" 

 

I want that the search $click.value$ will be replaced with the clicked value,

First If the clicked value is == "REPL-(batch)"  change it by  "REPL-         " if not i want to keep the clicked value as it is, it seems that is not working and the search keeps the first clicked value in both $click.value$, i dont know hot to pass the updated value of $click.value$ in the  search statement.

 

Coudl you help me, please?

 

Thanks.

 

 

0 Karma
Get Updates on the Splunk Community!

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk New Course Releases for a Changing World

Every day, the world feels like it’s moving faster with new technological breakthroughs, AI innovation, and ...