Splunk Search

Why is chart drilldown not passing parameter?

claatu
Explorer

When I attempt to drilldown from a dashboard (line) chart to another dashboard (form), it seems like the parameter is not being passed on.

The chart is pretty simple, the query for it ends with:

... | table "Month" "NonCompliant"

So the X axis is each month and the Y axis is a count of NonCompliant things.
The drilldown is set as:

  <link target="_blank">/app/splunk_app_sa/noncompliants_for_period?thePeriod="$click.value$"</link>
</drilldown>

The idea is when I click on a node on that chart (say, for month 09/2018), that “09/2018” should get passed to the other dashboard as “thePeriod”.

The other dashboard, which works fine if you enter "thePeriod" manually, has:

<input type="text" token="thePeriod">
  <label>For Period (mm/yyyy)</label>
</input>

Clicking on the month node does bring up the other dashboard, but without providing the clicked-on month parameter.
I have tried “$click.name$”, "$click.value$", “$row.Month$”, etc, with and without quotes...

Any ideas?

0 Karma
1 Solution

renjith_nair
SplunkTrust
SplunkTrust

@claatu,

Prefix form token names with "form." if you are setting token values in a target form.

E.g.

/app/splunk_app_sa/noncompliants_for_period?form.thePeriod=$click.value$
Happy Splunking!

View solution in original post

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

@claatu,

Prefix form token names with "form." if you are setting token values in a target form.

E.g.

/app/splunk_app_sa/noncompliants_for_period?form.thePeriod=$click.value$
Happy Splunking!
0 Karma

claatu
Explorer

Can't believe I didn't see that. Thanks.

0 Karma
Get Updates on the Splunk Community!

Splunk APM & RUM | Upcoming Planned Maintenance

There will be planned maintenance of Splunk APM’s and Splunk RUM’s streaming infrastructure in the coming ...

Part 2: Diving Deeper With AIOps

Getting the Most Out of Event Correlation and Alert Storm Detection in Splunk IT Service Intelligence   Watch ...

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...