Splunk Search

listing events directly from a table

smolcj
Builder

Hi all,
is there any option to directly list the events for a particular table entry..
after a search in dashboard using table option,,i got a table like
tablename
entry1
entry2
entry3

if i want to get the events under entry3 , obviously i will click on entry3, but it will take me to another page listing the same and again i have to click on entry 3 then the table looks like
tablename
entry3
and one more click on entry3 result in listing the events.. can't i get this in one click?
please help
thank you

Tags (2)
0 Karma

Ayn
Legend

This sounds like you want to configure drilldowns in your dashboard. The Dashboard examples app has lots of info on how to this kind of thing.

0 Karma

Ayn
Legend

That's exactly the kind of thing you can learn by downloading and studying the Dashboards examples app.

0 Karma

smolcj
Builder

thanks for the response.. but how can i do drilldown for a table entry? how will i get the value for another search or link
thank u

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...