Splunk Search

persistent dropdown, multiselect and time inputs across dashboards

schose
Builder

Hi all,

I'm using multiple dashboards (for cpuusage, memusage, hdd usage) in an app where you can select different host by multiselect dropdown lists. When the user selects a different dashboard he always have to select the hosts again.

I would like to make it easier for the user and keep the multiselect and timeinformation consistent across different dashboards in an app.

What's the easiest way to archive this?

Thanks for your help in advance.

Andreas

Tags (1)
0 Karma

schose
Builder

right, bit this is not gonna work for me as i would need to link every single dashboard together.. (15 in sum).

what can I do if the user is using the navbar?!
Would it be otherwise possible to save the values for a dashboard?

Regards,

Andreas

0 Karma

sundareshr
Legend

Have you considered show/hide panels, based on dashboard type? In other words, create one view will panels from all dashboards. Add either links on top or a form field, where user can select type of dashboard. Based on this selection, you can show/hide appropriate panels and execute that search.

0 Karma

gcusello
SplunkTrust
SplunkTrust

You have to pass the token of the row you clicked.
http://docs.splunk.com/Documentation/Splunk/6.4.2/Viz/tokens
In addition you can pass the tokens of the inputs (like Time period).

in other words you have to insert something like this

          <link>
            <![CDATA[secondary_dashboard?field1=$click.value$&TimeDa=$Time.earliest$&TimeA=$Time.latest$&input2=$input2$]]>
          </link>
        </drilldown>

Bye.
giuseppe

0 Karma

gcusello
SplunkTrust
SplunkTrust

if you're satisfied of the answer, please, accept the answer.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...