On the first dashboad I have:
<drilldown>
<link target="_blank">/app/appname/logon_fail?drill_account=$click.value$</link>
</drilldown>
On the second dashboard I have a search like:
<search>
<query>index=index EventCode=4625 Account_Name=$drill_account$
</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
Now, I try, to get this search running, even when there is no drilldown and the token "drill_account" is not set. Right now, it says "Waiting for input..."
Any suggestions? I tried to set this token to "*", but nothing worked for me.
Thx in advanced. Chris
... View more