Dashboards & Visualizations

sub-linking a report

aniketb
Path Finder

Hi,

I have a weekly statistic report set up in Splunk for my executive. He sees a well plotted graph. As you know, if you click on any column, it'll show you the logs of the sourcetype that column is representing.

He asked me, if I click the column it should change the graph to that particular incident/sourcetype over the past week. Just the event counts but in a graph/report format.

Is it possible to do that? Will it be like linking a sub-report to a main report?

0 Karma
1 Solution

Ayn
Legend

What you're talking about (as I interpret it) is called a drilldown. The UI examples app has a number of examples on different kinds of drilldowns, I highly recommend you download it and have a look if you haven't done it already. Also, these docs sections contain useful information on creating customized drilldowns.

http://docs.splunk.com/Documentation/Splunk/latest/Developer/TableChartDrilldown
http://docs.splunk.com/Documentation/Splunk/latest/User/UnderstandTableandChartDrilldownActions

View solution in original post

Ayn
Legend

What you're talking about (as I interpret it) is called a drilldown. The UI examples app has a number of examples on different kinds of drilldowns, I highly recommend you download it and have a look if you haven't done it already. Also, these docs sections contain useful information on creating customized drilldowns.

http://docs.splunk.com/Documentation/Splunk/latest/Developer/TableChartDrilldown
http://docs.splunk.com/Documentation/Splunk/latest/User/UnderstandTableandChartDrilldownActions

aniketb
Path Finder

Exactly! Drilldown is what I was looking for!

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...