All Apps and Add-ons

drill-down doesn't work with base query for calendar custom visualization

praphulla1
Path Finder

We are using calendar visualization for showing events in dashboard. I have tried to add drill-down behavior by using click.value. This works perfectly if i don't use base search. Once i switch to base search it click.value works only for first event.

Is there a work around for this issue ?

  <row>
    <panel>
      <viz type="calendar_app.calendar">
        <title>Calendar View - click_value: $selected_value$ date: $date$</title>
        <search base="pto_search">
          <query>|eval _time=time | search dataType=ptoData | timechart span=1d count by resourceName</query>
        </search>
        <option name="calendar_app.calendar.calendarView">month</option>
        <option name="calendar_app.calendar.showWeekNumbers">false</option>
        <option name="calendar_app.calendar.showWeekends">false</option>
        <option name="height">550</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <set token="selected_value">$click.value$</set>
          <eval token="date">strftime($click.value$,"%d-%b-%Y")</eval>
        </drilldown>
      </viz>
    </panel>
  </row>
Labels (3)
0 Karma

ivan_yanev
Explorer

I have the exact same issue. If I set the dashboard to refresh every 1 minute then I get the token value applied on the visualization every 1 minute....no matter how many times you click on the filter viz.

0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco &#43; Splunk! We’ve ...