Help to create drill-down on a stacked bar chart?

[vrmandadi]

Hello,

I am finding it difficult to create a drilldown on bar chart which has:

A
B
C

with success and failures stacked. I am trying to create a drilldown when clicking on the failures of each of them (see attachment), but I am not finding any luck in that.

[somesoni2]

Try this for your drilldown eval

 <eval token="success">if('click.name'="AUTHENTIC" AND 'click.value2'="Failure", "success", null())</eval>
 <eval token="failure">if('click.name'="BANK" AND 'click.value2'="Failure", "failure", null())</eval>
 <eval token="other">if('click.name'="RTDC" AND 'click.value2'="Failure", "other", null())</eval>

[ashishlal82]

I have similar issue. I have a chart with Y-axis Names of Host Names and Y-Axis as count with Auth and Unauth as stacked bar. If some clicks on either Auth or unauth. the click even should capture the host names and auth or unauth and pass this value to the desitination form to produce a table.

Not sure how to pass values from source to destination? Any help

[frobinson_splun]

Hi @ashishlal82,
You might want to check out this topic in our documentation. It offers advice and some examples for creating dynamic drilldown behavior and using tokens to pass values between source and destination:
http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/Dynamicdrilldownindashboardsandforms

This topic on tokens might also be helpful to you:
http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/tokens

You can also see the Dashboard Examples app for some further ideas:

https://splunkbase.splunk.com/app/1603/

Hope this helps!

[vrmandadi]

Hi Somesh,

I tried your answer,but no luck with that,When clicked on any failure it is not showing any drill down instead redirecting to a search