Dashboards & Visualizations

Drilldown Chart

wyang6
Path Finder

I would like to drilldown on a cell of a chart in the dashboard and use that value to re-search and display in a different panel? How should I go about doing that? Thank you.

Tags (1)
0 Karma
1 Solution

sideview
SplunkTrust
SplunkTrust

Check out the "UI Examples for 4.1" app on Splunkbase. It has numerous example views in both the simplified and advanced XML format.

Underneath 'Advanced XML', and then underneath 'Drilldown Examples' you'll see several examples of the config you're describing. It generally goes by the name "inline drilldown" or "paned viewer" configuration.

In brief, you can only do this configuration in the Advanced XML, and if you're already familiar with the advanced XML it amounts to just finding the relevant ViewRedirector module and replacing it with a different module or a different set of modules. But look at the examples in the downloadable app because they'll make more sense.

And if you arent familiar with the advanced XML yet, that app can walk you through it from a simple Hello World level.

View solution in original post

sideview
SplunkTrust
SplunkTrust

Check out the "UI Examples for 4.1" app on Splunkbase. It has numerous example views in both the simplified and advanced XML format.

Underneath 'Advanced XML', and then underneath 'Drilldown Examples' you'll see several examples of the config you're describing. It generally goes by the name "inline drilldown" or "paned viewer" configuration.

In brief, you can only do this configuration in the Advanced XML, and if you're already familiar with the advanced XML it amounts to just finding the relevant ViewRedirector module and replacing it with a different module or a different set of modules. But look at the examples in the downloadable app because they'll make more sense.

And if you arent familiar with the advanced XML yet, that app can walk you through it from a simple Hello World level.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...