Dashboards & Visualizations

Drilldown to 2 different dashboards from one

shreyad
Explorer

How do I drilldown to 2 different dashboards from a singular table (with 2 different values) on a dashboard?

0 Karma

niketn
Legend

@shreyad, have you tried something like the following?

Fill in required details as per your use case:
1) yourSplunkAppName
2) yourSplunkDashboard1 and yourSplunkDashboard2
3) yourDashboard1TokenName and yourDashboard2TokenName etc.
4) Default table drilldown tokens like $click.name$, $click.name1$, $row.$

    <drilldown>
      <link target="_blank">/app/<yourSplunkAppName>/<yourSplunkDashboard1>?form.<yourDashboard1TokenName>=$row.<yourTableFieldNameForSelectedRow>$</link>
      <link target="_blank">/app/<yourSplunkAppName>/<yourSplunkDashboard2>?form.<yourDashboard2TokenName>=$click.name2$</link>
    </drilldown>

Following is a run anywhere example based on Splunk's _internal index which use dropdown link to google and yahoo searches.

<dashboard>
  <label>Drilldown to two dashboards</label>
  <row>
    <panel>
      <table>
        <search>
          <query>index=_internal sourcetype=splunkd log_level!=INFO
| chart count by component log_level</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
        <drilldown>
          <link target="_blank">https://google.com/search?q=$row.component$</link>
          <link target="_blank">https://search.yahoo.com/search?p=$click.name2$</link>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...