Splunk Search

listing events directly from a table

smolcj
Builder

Hi all,
is there any option to directly list the events for a particular table entry..
after a search in dashboard using table option,,i got a table like
tablename
entry1
entry2
entry3

if i want to get the events under entry3 , obviously i will click on entry3, but it will take me to another page listing the same and again i have to click on entry 3 then the table looks like
tablename
entry3
and one more click on entry3 result in listing the events.. can't i get this in one click?
please help
thank you

Tags (2)
0 Karma

Ayn
Legend

This sounds like you want to configure drilldowns in your dashboard. The Dashboard examples app has lots of info on how to this kind of thing.

0 Karma

Ayn
Legend

That's exactly the kind of thing you can learn by downloading and studying the Dashboards examples app.

0 Karma

smolcj
Builder

thanks for the response.. but how can i do drilldown for a table entry? how will i get the value for another search or link
thank u

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Observability Simplified: Combining User Experience, Application Performance & ...

Tech Talk Observability Simplified: Combining User Experience, Application Performance & Network ...

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...