Splunk Enterprise

How to set the Initial value of drilldown's token?

SCSC
Explorer

I made drilldown from pie chart to scatter chart.

Pie chart :

 

<drilldown>
 <set token="BU">$row.BU$</set>
</drilldown>

 

search sentence of Scatter chart : 

 

<search>
 <query>
  index="indexA"
  | search BU=$BU$ 
  | eval XXX
 </query>
 <earliest>$field1.earliest$</earliest>
 <latest>$field1.latest$</latest>
</search>

 


Question : Can I set the  Initial or default value of this token?
I'm in trouble that scatter chart does not appear until you click something on pie chart.

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You could try adding a done handler to the search of the pie chart, and set the initial value of the token there.

View solution in original post

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You could try adding a done handler to the search of the pie chart, and set the initial value of the token there.

0 Karma

SCSC
Explorer

It was solved thanks to you.
Thank you very much !

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...