I have a dashboard panel with a table showing some events, which each contain a jobId field. I'm trying to use the drilldown to set a token on the dashboard to that jobId, let's call it CLICKED_ID. Then I should be able to go into the edit drilldown menu, pick Set, put in CLICKED_ID for the token name, and $row.jobId$ for the value. So far so good... The problem arises when I go to a different dashboard panel after clicking on some row in the first panel and try to use that $CLICKED_ID$ token in its search. Yes, the $CLICKED_ID$ token is successfully replaced... by the string "$row.jobId$", not by the actual value of jobId from that event! Not even fields that I know should exist in the events work; setting $CLICKED_ID$ to $row.sourcetype$ or $row.hostname$ didn't get the values correctly, instead just getting literally "$row.sourcetype$" and so on. For now I'm getting around this by having the jobId appear in the table of the first panel and using $click.value2$, which works fine. However, I would like the user to be able to click any cell on that row and still have the right values go to the second panel, as opposed to having to click specifically on the jobId column. This is also a problem if I want to stop displaying the jobId on the first panel, too, since the user won't be able to click on it to populate the second panel. Am I doing something wrong here? Please let me know if I can include anything more that might help. Thanks!
... View more
