Hi @mayurr98 Unfortunately what you are trying to achieve isnt supported. You cannot reference row.<fieldName>.value in a splunk.singlevalue viz (See https://docs.splunk.com/Documentation/Splunk/9....
See more...
Hi @mayurr98 Unfortunately what you are trying to achieve isnt supported. You cannot reference row.<fieldName>.value in a splunk.singlevalue viz (See https://docs.splunk.com/Documentation/Splunk/9.4.0/DashStudio/tokens#:~:text=the%20location%20clicked-,splunk.singlevalue,-Field%20name%20of) You can only use "name" or "value". *HOWEVER* - You could do something clever with "name" such as below, setting the name to the method value (in this example) - so the single value becomes GET=593,453 for the below, and clicking on it sets $method$=GET: {
"title": "Set Tokens on Click - Example",
"description": "",
"inputs": {
"input_global_trp": {
"options": {
"defaultValue": "-24h@h,now",
"token": "global_time"
},
"title": "Global Time Range",
"type": "input.timerange"
}
},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"earliest": "$global_time.earliest$",
"latest": "$global_time.latest$"
}
}
}
}
},
"visualizations": {
"viz_column_chart": {
"containerOptions": {},
"dataSources": {
"primary": "ds_qBGlESX2"
},
"eventHandlers": [
{
"type": "drilldown.setToken",
"options": {
"tokens": [
{
"key": "name",
"token": "method"
}
]
}
}
],
"showLastUpdated": false,
"showProgressBar": false,
"title": "HTTP Request Method",
"type": "splunk.singlevalue",
"options": {
"majorValue": "> sparklineValues | lastPoint()",
"trendValue": "> sparklineValues | delta(-2)"
}
},
"viz_pie_chart": {
"dataSources": {
"primary": "ds_c8AfQapt"
},
"title": "Response Codes for Method $method$",
"type": "splunk.pie"
}
},
"dataSources": {
"ds_c8AfQapt": {
"name": "Search_2",
"options": {
"query": "index=_internal method=$method$ | stats count by status"
},
"type": "ds.search"
},
"ds_qBGlESX2": {
"name": "Search_1",
"options": {
"enableSmartSources": true,
"query": "index=_internal method=GET | stats count by method\n| eval {method}=count \n| fields - method count"
},
"type": "ds.search"
}
},
"layout": {
"type": "absolute",
"options": {
"width": 1440,
"height": 960,
"display": "auto"
},
"structure": [
{
"item": "viz_column_chart",
"type": "block",
"position": {
"x": 0,
"y": 0,
"w": 250,
"h": 250
}
},
{
"item": "viz_pie_chart",
"type": "block",
"position": {
"x": 390,
"y": 0,
"w": 250,
"h": 250
}
}
],
"globalInputs": [
"input_global_trp"
]
}
} Is this what you are looking for? Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped. Regards Will