I am having a graph that display what I want, when I click any given point it'll jump to the search result according to clicked item.
everything is fine - I want to modify this behavior based on the clicked item id.
When I click on graph, search result is
sourcetype="log_line" item_id="someid"
instead of above I want to display
sourcetype="log_line" "someid" | transaction startswith="TRNAS_BEGIN" endswith="TRNAS_END"
How to achieve this functionality?
Thanks