Splunk Search

passing a variable/token through link search

smolcj
Builder

hi,
i have a simple xml form with a dropdown box and several single value panels. how can i pass the token from dropdown box through link search something like
index=main source=$sources$ sourcetype=plog |transaction startswith="Start"
i tried replacing $sources$ with form.source row.source.. but it is not working fine.
please help
Thank you

Tags (1)

Leo
Splunk Employee
Splunk Employee

Try this example and see if it helps with your situation.

smolcj
Builder

Sorry Leo, that is not what i want, here in your single value panel you have a field called count, is it? i want to drill down by clicking to that count field. how to embed the drill down in table to this single value output. i heard from nick that dirill down in single value panel cannot be dynamic, so i am thinking of closing this question
Thank you

0 Karma

Leo
Splunk Employee
Splunk Employee

It should work the same way. I've added a single value field to the previous example:
http://pastebin.com/BmW96WmQ

0 Karma

smolcj
Builder

how can i do it with single value panel? link search option in single value panel behaves like static

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...