Dashboards & Visualizations

How to pass multiple tokens and a time range picker token to another dashboard via drilldown?

zd00191
Communicator

Hello. I have a dashboard with the following input tokens.

<form>
  <label>System/Platform Job Completion Report</label>
  <description/>
  <fieldset autoRun="true" submitButton="false">
    <input type="time" searchWhenChanged="true" token="Time">
      <default>
        <earliestTime>-12h</earliestTime>
        <latestTime>now</latestTime>
      </default>
    </input>
    <input type="dropdown" token="System" searchWhenChanged="true">
      <label>System</label>
      <choice value="*">All</choice>
      <default>*</default>
      <populatingSearch earliest="$Time.earliest$" latest="$Time.latest$" fieldForValue="System" fieldForLabel="System">
        <![CDATA[ index=ko_autosys sourcetype=autosys_applog_scheduler_events host="usatlb98" OR host="usatlb91" |stats count by System ]]>
      </populatingSearch>
    </input>
  </fieldset>

I want to pass the System token and the time range picker token to another dashboard called job_monitor. How do I pass the time range selected and the system via drill down? The system will be a click.value.

0 Karma
1 Solution

somesoni2
SplunkTrust
SplunkTrust

Both the time range picket values (earliest and latest) and dropdown's selected value will be available with direct token name e.g. $System$ and $Time.earliest$/$Time.latest$ and can passed as it is to a drilldown URL. The only thing you need to take care would to assign the token name which is available in the next dashboard.

See Splunk documentation for more details. http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#Drilldown_eleme...

<drilldown>
  <link>
  <![CDATA[
/app/search/simple_xml_form?form.SystemIn2ndDashboard=$System$&earliest=$Time.earliest$&latest=$Time.latest$
  ]]>
  </link>
</drilldown>

View solution in original post

somesoni2
SplunkTrust
SplunkTrust

Both the time range picket values (earliest and latest) and dropdown's selected value will be available with direct token name e.g. $System$ and $Time.earliest$/$Time.latest$ and can passed as it is to a drilldown URL. The only thing you need to take care would to assign the token name which is available in the next dashboard.

See Splunk documentation for more details. http://docs.splunk.com/Documentation/Splunk/6.2.1/Viz/PanelreferenceforSimplifiedXML#Drilldown_eleme...

<drilldown>
  <link>
  <![CDATA[
/app/search/simple_xml_form?form.SystemIn2ndDashboard=$System$&earliest=$Time.earliest$&latest=$Time.latest$
  ]]>
  </link>
</drilldown>

zd00191
Communicator

If I wanted to grab a column name from a table and the system token and the time, how would that look? Would it look like this?

    <link>
      <![CDATA[/app/ko_autosys/error_list?form.status=$click.value$&amp;System=$jSystem$&earliest=$Time.earliest$&latest=$Time.latest$]]>
    </link>
  </drilldown>
0 Karma

somesoni2
SplunkTrust
SplunkTrust

Yes.
Please note the format of the query string while drilldown

/path/dashboardName?destinationcontrolORtoken=$tokenTobePassed$
0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...