Dashboards & Visualizations

how could I generate a wildcard for a contextual drilldown token in a pie chart?

cphair
Builder

I have a conditional drilldown from a simple XML pie chart that opens a chart in a new panel based on which pie slice I clicked. I've been asked to also make it possible to drill down on all values--basically setting the token to a star. Is there a way to do that from the chart itself? Or do I need to do something hacky like add an input dropdown to my panel that will toggle between a star drilldown and a per-slice drilldown?

0 Karma

niketn
Legend

You can definitely set token within selection event of the Pie chart. However, since the value is always going to be , I am not sure as to why you can not have a panel with hard-coded [fieldname]= and only set the $earliest$ and $latest$ tokens from the pie chart, which I believe you are already doing right now.

<selection>
  <set token="allValues">*</set>
</selection>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

cphair
Builder

I still want the user to be able to drill down on the value in a clicked section of the pie chart. The problem is that there is no way to click on all sections at once.

0 Karma

niketn
Legend

I think above should still solve your problem. The token allValues will be set when you click on Pie Chart.

In your search you can use [YourFieldName]=$allValues$

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

niketn
Legend

Can you give what field is the pie chart built on and what is the search you want to run when the Pie chart is clicked?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...