Dashboards & Visualizations

Drill down value from bar chart to single value in dashboard studio

dtccsundar
Path Finder

Hi,

I am new to dashboard studio .

How to create a drill down from bar chart to a single value chart dynamically in dashboard studio.Bar chart has sourcetypes( Pass,fail,error) counts  in y axis and count in x-axis.

The single value chart have to show independent counts of Pass,fail,error upon selection in bar chart. 

Labels (2)
0 Karma
1 Solution

kamlesh_vaghela
SplunkTrust
SplunkTrust

@dtccsundar 

In Splunk Dashboard Studio, right now there is no support for tokens on drilldown like Simple xml. Only URL redirect is supported.

 

https://docs.splunk.com/Documentation/Splunk/8.2.2/DashStudio/IntroFrame

 

Screenshot 2021-10-11 at 8.01.04 PM.png

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. 

View solution in original post

kamlesh_vaghela
SplunkTrust
SplunkTrust

@dtccsundar 

In Splunk Dashboard Studio, right now there is no support for tokens on drilldown like Simple xml. Only URL redirect is supported.

 

https://docs.splunk.com/Documentation/Splunk/8.2.2/DashStudio/IntroFrame

 

Screenshot 2021-10-11 at 8.01.04 PM.png

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated. 

dtccsundar
Path Finder

Thank you .

Please let me know ,how the same can be achieved in classic dashboards .

 

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@dtccsundar 

Try this Simple XML.

<dashboard>
  <label>Bar drill</label>
  <row>
    <panel>
      <chart>
        <search>
          <query>| makeresults count=2 | eval sourcetypes="Pass,fail,error"| eval sourcetypes=split(sourcetypes,",") | stats count by sourcetypes</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="charting.chart">bar</option>
        <option name="charting.drilldown">all</option>
        <drilldown>
          <set token="tkn">$click.value2$</set>
        </drilldown>
      </chart>
    </panel>
  </row>
  <row>
    <panel>
      <single>
        <search>
          <query>| makeresults count=1 | eval sourcetypes="$tkn$"| table sourcetypes</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">none</option>
      </single>
    </panel>
  </row>
</dashboard>

 

Thanks
KV
▄︻̷̿┻̿═━一   😉

If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.

0 Karma

dtccsundar
Path Finder

Apologies for wrong requirement earlier.

Need help for the below,

The sourcetypes has different values in it like below ,

index=a sourcetype=b |eval details=1

|append [|search index=c sourcetype=d|eval details=2]

|append [|search index=e sourcetype=f|eval details=3]

|eventstats count by details|

Pass%=count(pass)/total*100,2

Fail%=count(fail)/total*100,2

Error%=count(Error)/total*100,2

|table pass fail error total

I have a barchart with x-axis with details and y-axis %(pass%,fail%,error%) of ( pass fail error etc).When i click the details(x-axis) in barchart , the single value should show number of individual Pass,fail,error in trellis.

Please let me know how this can be achieved . 

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...