Refine your search:

hi all,

i have a list of some 50 source files like

taskmanager_log(1)

gpoor_tomca_log

srp_log4j

..

what i want is if clik any source file i want to run this search query as

Ex: source="taskmanager_log(1)"|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration

asked 02 Nov '12, 00:50

splunkpoornima's gravatar image

splunkpoornima
82229
accept rate: 0%


One Answer:
<?xml version='1.0' encoding='utf-8'?>
<dashboard>
<row>
<table>
<searchTemplate>
          ...search returning list of your sources...
</searchTemplate>
<drilldown>
<link>/app/search/flashtimeline?q=source=$row.source$|trnsaction TaskAction startswith=START endswith=Succeeded|table TaskAction Duration</link>
</drilldown>
</table>
</row>
</dashboard>
link

answered 03 Nov '12, 21:23

Leo's gravatar image

Leo ♦
1.5k2314
accept rate: 38%

edited 03 Nov '12, 21:29

to fetch the list of sources i used index=*|chart values(sources) by index..

but when i click the source value ..in the search bar it shows

index=*|index="xx"

but the source is not displaying and also the query is also not coming

(04 Nov '12, 23:21) splunkpoornima
Post your answer
toggle preview

Follow this question

Log In to enable email subscriptions

RSS:

Answers

Answers + Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×291

Asked: 02 Nov '12, 00:50

Seen: 588 times

Last updated: 04 Nov '12, 23:21

Copyright © 2005-2014 Splunk Inc. All rights reserved.