Dashboards & Visualizations

How to pass 2 values at a time in a drilldown when clicking on a row in a table?

xvxt006
Contributor

Hi,

When i click on a particular cell, say If i click on number 4 in the screenshot (under 400 and next to PR511), I should have JVM=PR511 and status=400. is there a way to get both the values using click.value or something like that?

sourcetype=access_combined_wcookie JVM=PR* status >399 AND status<500 | chart count over JVM by status

alt text

Tags (1)
0 Karma

somesoni2
SplunkTrust
SplunkTrust

See this link for details on what all tokens are available for drilldown from a table.
http://docs.splunk.com/Documentation/Splunk/6.2.2/Viz/PanelreferenceforSimplifiedXML#table_.28event_...

So, you would be able to use $click.name2$ for name of the click column (that will be 400) and $row.JVM$ OR $click.value$ for PR511

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...