When I attempt to drilldown from a dashboard (line) chart to another dashboard (form), it seems like the parameter is not being passed on.
The chart is pretty simple, the query for it ends with:
... | table "Month" "NonCompliant"
So the X axis is each month and the Y axis is a count of NonCompliant things.
The drilldown is set as:
<link target="_blank">/app/splunk_app_sa/noncompliants_for_period?thePeriod="$click.value$"</link>
</drilldown>
The idea is when I click on a node on that chart (say, for month 09/2018), that “09/2018” should get passed to the other dashboard as “thePeriod”.
The other dashboard, which works fine if you enter "thePeriod" manually, has:
<input type="text" token="thePeriod">
<label>For Period (mm/yyyy)</label>
</input>
Clicking on the month node does bring up the other dashboard, but without providing the clicked-on month parameter.
I have tried “$click.name$”, "$click.value$", “$row.Month$”, etc, with and without quotes...
Any ideas?
@claatu,
Prefix form token names with "form." if you are setting token values in a target form.
E.g.
/app/splunk_app_sa/noncompliants_for_period?form.thePeriod=$click.value$
@claatu,
Prefix form token names with "form." if you are setting token values in a target form.
E.g.
/app/splunk_app_sa/noncompliants_for_period?form.thePeriod=$click.value$
Can't believe I didn't see that. Thanks.