My apologies, @elend. I must modify my answer. Whereas I haven't found a way to use cell value (by column) for drilldown in SimpleXML, what you ask is very easy in Dashboard Studio: Just set a toke...
See more...
My apologies, @elend. I must modify my answer. Whereas I haven't found a way to use cell value (by column) for drilldown in SimpleXML, what you ask is very easy in Dashboard Studio: Just set a token using "value" option. Here is a simple example {
"visualizations": {
"viz_L2lVmmIi": {
"type": "splunk.table",
"dataSources": {
"primary": "ds_XAakW253"
},
"title": "Set local => $set_tok$",
"eventHandlers": [
{
"type": "drilldown.setToken",
"options": {
"tokens": [
{
"token": "set_tok",
"key": "value"
}
]
}
}
]
}
},
"dataSources": {
"ds_XAakW253": {
"type": "ds.search",
"options": {
"query": "| makeresults format=csv data=\"_click\nA\nb\nC\nd\nfoo\nbar\nmore letters\"\n| eval click = \"You click \" . _click"
},
"name": "Simple table"
}
},
"defaults": {
"dataSources": {
"ds.search": {
"options": {
"queryParameters": {
"earliest": "-24h@h",
"latest": "now"
}
}
}
}
},
"inputs": {},
"layout": {
"type": "grid",
"options": {
"width": 1440,
"height": 960
},
"structure": [
{
"item": "viz_L2lVmmIi",
"type": "block",
"position": {
"x": 0,
"y": 0,
"w": 1440,
"h": 346
}
}
],
"globalInputs": []
},
"description": "",
"title": "Drilldown to cell value"
} Here are two screenshots, one click on column 1, the other on column2: