Hello. I have a dashboard with the following input tokens.
<form>
<label>System/Platform Job Completion Report</label>
<description/>
<fieldset autoRun="true" submitButton="false">
<input type="time" searchWhenChanged="true" token="Time">
<default>
<earliestTime>-12h</earliestTime>
<latestTime>now</latestTime>
</default>
</input>
<input type="dropdown" token="System" searchWhenChanged="true">
<label>System</label>
<choice value="*">All</choice>
<default>*</default>
<populatingSearch earliest="$Time.earliest$" latest="$Time.latest$" fieldForValue="System" fieldForLabel="System">
<![CDATA[ index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" |stats count by System ]]>
</populatingSearch>
</input>
</fieldset>
I want to pass the System token and the time range picker token to another dashboard called job_monitor. How do I pass the time range selected and the system via drill down? The system will be a click.value.
Both the time range picket values (earliest and latest) and dropdown's selected value will be available with direct token name e.g. $System$ and $Time.earliest$/$Time.latest$ and can passed as it is to a drilldown URL. The only thing you need to take care would to assign the token name which is available in the next dashboard.
See Splunk documentation for more details. http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#Drilldown_eleme...
<drilldown>
<link>
<![CDATA[
/app/search/simple_xml_form?form.SystemIn2ndDashboard=$System$&earliest=$Time.earliest$&latest=$Time.latest$
]]>
</link>
</drilldown>
Both the time range picket values (earliest and latest) and dropdown's selected value will be available with direct token name e.g. $System$ and $Time.earliest$/$Time.latest$ and can passed as it is to a drilldown URL. The only thing you need to take care would to assign the token name which is available in the next dashboard.
See Splunk documentation for more details. http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#Drilldown_eleme...
<drilldown>
<link>
<![CDATA[
/app/search/simple_xml_form?form.SystemIn2ndDashboard=$System$&earliest=$Time.earliest$&latest=$Time.latest$
]]>
</link>
</drilldown>
If I wanted to grab a column name from a table and the system token and the time, how would that look? Would it look like this?
<link>
<![CDATA[/app/ko_autosys/error_list?form.status=$click.value$&System=$jSystem$&earliest=$Time.earliest$&latest=$Time.latest$]]>
</link>
</drilldown>
Yes.
Please note the format of the query string while drilldown
/path/dashboardName?destinationcontrolORtoken=$tokenTobePassed$