Not finding any examples so far, but not sure if it's possible.
Wanting to have one dashboard panel that has a result, say 4 values in FIELD1, & then I want to use all the values found & pass to all the other dashboard panels as a token to search for.
It would even be cool to click on a value in FIELD1 & then have it populate to the rest of the dashboards.
Is this possible & straight forward to do?
What you seek is called Contextual drilldown OR IN-page drilldown in Splunk. See following link for details and working sample.
You can also see the it's example in Drilldown section of the Splunk 6 Dashboard Example App.
What you seek is called Contextual drilldown OR IN-page drilldown in Splunk. See following link for details and working sample.
You can also see the it's example in Drilldown section of the Splunk 6 Dashboard Example App.
You can either have the 4 values in a dropdown or in a Link List.
Start here: http://docs.splunk.com/Documentation/Splunk/6.4.3/Viz/tokens#Define_tokens_for_form_inputs
If this doesn't help, share your dashboard code
All this info was great.. got it all working.. thanks!
In short, yes, it is possible. I have dashboards where you click on any of 3 charts/tables to select what is broken out in another 2 panels.
The documentation provided above should get you started. There is a learning curve... but not too bad. I would take a look at the Splunk example dashboards too.