Splunk Search

Why is chart drilldown not passing parameter?

claatu
Explorer

When I attempt to drilldown from a dashboard (line) chart to another dashboard (form), it seems like the parameter is not being passed on.

The chart is pretty simple, the query for it ends with:

... | table "Month" "NonCompliant"

So the X axis is each month and the Y axis is a count of NonCompliant things.
The drilldown is set as:

  <link target="_blank">/app/splunk_app_sa/noncompliants_for_period?thePeriod="$click.value$"</link>
</drilldown>

The idea is when I click on a node on that chart (say, for month 09/2018), that “09/2018” should get passed to the other dashboard as “thePeriod”.

The other dashboard, which works fine if you enter "thePeriod" manually, has:

<input type="text" token="thePeriod">
  <label>For Period (mm/yyyy)</label>
</input>

Clicking on the month node does bring up the other dashboard, but without providing the clicked-on month parameter.
I have tried “$click.name$”, "$click.value$", “$row.Month$”, etc, with and without quotes...

Any ideas?

0 Karma
1 Solution

renjith_nair
SplunkTrust
SplunkTrust

@claatu,

Prefix form token names with "form." if you are setting token values in a target form.

E.g.

/app/splunk_app_sa/noncompliants_for_period?form.thePeriod=$click.value$
Happy Splunking!

View solution in original post

0 Karma

renjith_nair
SplunkTrust
SplunkTrust

@claatu,

Prefix form token names with "form." if you are setting token values in a target form.

E.g.

/app/splunk_app_sa/noncompliants_for_period?form.thePeriod=$click.value$
Happy Splunking!
0 Karma

claatu
Explorer

Can't believe I didn't see that. Thanks.

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...