Currently Splunk puts the bar chart labels off to the left and truncates them which makes things really hard to read: Is there any way to view the label of a bar on the actual bar itself like this: ... View more

I have a dataset that has multiple attributes: accountNumber, deviceNumber, eventName, status I built a dashboard with 4 panels each showing "chart count by x" for each of the 4 attributes. I want to allow to user to click on a value in the panel to filter the dashboard on that value, but I also want them to compound. So in order to do so, I have to pass, not only the click.value, but also each of the form's current values like this: <drilldown> <link> <![CDATA[myDashboard?form.accountNumber=$click.value$&form.deviceNumber=$form.deviceNumber$&form.eventName=$form.eventName$&form.status=$form.status$&form.timePicker.earliest=$form.timePicker.earliest$&form.timePicker.latest=$form.timePicker.latest$&earliest=0&latest=]]> </link> </drilldown> which is kind of a pain. Is there a way to send a single form.values or token that would pass all the form's current values so I can shorten the link to this: <drilldown> <link> <![CDATA[myDashboard?form.accountNumber=$click.value$&form.allValues=$form.allValues$]]> </link> </drilldown> ... View more