Predict Categorical Assistant could be applied on this straight ahead using MLTK or you can use classifier algorithms like Random Forest Classifier directly via spl. ... View more

Just in case someone would look it up in the future.. We ended up creating a cookie that contain the tokens of Dashboard A and the drill down information Dashboard B would then read the cookie values as tokens and use them ... View more

Might as well answer my own question. The solution was simple, just using Untable with the "Total" field as the first argument (or use any other filed with Count) index=mydata|untable Count,Column,Value|stats sum(total) by Column,Value Look at all the pretty pie charts! Sample search on forwarders data: index=_internal source=*metrics.log|table *|untable index,column,value|stats count(index) by column,value ... View more