Hello,
I have a table with three columns, but I only want to display two columns, so I use the field command. When I click either column 1 or 2 from my dashboard, I want to access the column_3 data if I do this token:
$row.column_3|n$.
However, I am no longer able to access the column_3.
<query>
index=* | table column_1, column_2, column_3
| fields column_1, column_2
</query>
<drilldown>
<link>
myapplication/$row.column_3|n$
</link>
</drilldown>
I tried debugging my codes. Anywhere I click, I always go to "myapplication/$row.column_3|n$"
But when I change to either:
myapplication/$row.column_2|n$
OR
myapplication/$row.column_1|n$
I am getting the values accordingly. So it seems that $row.fieldname$ is working fine. Does anyone know what's going on? I thought fields allow me to display what I want, but keeps all the value from my table?
PS: I know that this workaround exists, but this line of code is not accepted if I have a column chart.
<field> ["column_1", "column_2"] </field>
Thank you in advance!!
... View more