All Apps and Add-ons

drill-down doesn't work with base query for calendar custom visualization

praphulla1
Path Finder

We are using calendar visualization for showing events in dashboard. I have tried to add drill-down behavior by using click.value. This works perfectly if i don't use base search. Once i switch to base search it click.value works only for first event.

Is there a work around for this issue ?

  <row>
    <panel>
      <viz type="calendar_app.calendar">
        <title>Calendar View - click_value: $selected_value$ date: $date$</title>
        <search base="pto_search">
          <query>|eval _time=time | search dataType=ptoData | timechart span=1d count by resourceName</query>
        </search>
        <option name="calendar_app.calendar.calendarView">month</option>
        <option name="calendar_app.calendar.showWeekNumbers">false</option>
        <option name="calendar_app.calendar.showWeekends">false</option>
        <option name="height">550</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <set token="selected_value">$click.value$</set>
          <eval token="date">strftime($click.value$,"%d-%b-%Y")</eval>
        </drilldown>
      </viz>
    </panel>
  </row>
Labels (3)
0 Karma

ivan_yanev
Explorer

I have the exact same issue. If I set the dashboard to refresh every 1 minute then I get the token value applied on the visualization every 1 minute....no matter how many times you click on the filter viz.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...