Dashboards & Visualizations

Drilldown Chart

wyang6
Path Finder

I would like to drilldown on a cell of a chart in the dashboard and use that value to re-search and display in a different panel? How should I go about doing that? Thank you.

Tags (1)
0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

Check out the "UI Examples for 4.1" app on Splunkbase. It has numerous example views in both the simplified and advanced XML format.

Underneath 'Advanced XML', and then underneath 'Drilldown Examples' you'll see several examples of the config you're describing. It generally goes by the name "inline drilldown" or "paned viewer" configuration.

In brief, you can only do this configuration in the Advanced XML, and if you're already familiar with the advanced XML it amounts to just finding the relevant ViewRedirector module and replacing it with a different module or a different set of modules. But look at the examples in the downloadable app because they'll make more sense.

And if you arent familiar with the advanced XML yet, that app can walk you through it from a simple Hello World level.

View solution in original post

sideview
SplunkTrust
SplunkTrust

Check out the "UI Examples for 4.1" app on Splunkbase. It has numerous example views in both the simplified and advanced XML format.

Underneath 'Advanced XML', and then underneath 'Drilldown Examples' you'll see several examples of the config you're describing. It generally goes by the name "inline drilldown" or "paned viewer" configuration.

In brief, you can only do this configuration in the Advanced XML, and if you're already familiar with the advanced XML it amounts to just finding the relevant ViewRedirector module and replacing it with a different module or a different set of modules. But look at the examples in the downloadable app because they'll make more sense.

And if you arent familiar with the advanced XML yet, that app can walk you through it from a simple Hello World level.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...