Hi,
I have a panel in dashboard in table format.
Example Table format as below :
Signs Count
Sigma 20
Board 30
Sierra 40
Odd 89
Now when I click Sigma,I wanted to have the search result for the query ------ index= 'Sigma'
And when I click Board,search result of index= 'Board'...Similarly for Sierra too.
But when I click Odd, I wanted to run a different query altogether and get the search result of it.
Please help me achieve it.
Thanks in advance!
Hi
Check this
<dashboard>
<label>drilldown Clone</label>
<row>
<panel>
<table>
<search>
<query>| makeresults
| eval Signs="Sigma",Count=20
| append
[| makeresults | eval Signs="Board",Count=30]
| append
[| makeresults | eval Signs="Sierra",Count=40]
| append
[| makeresults | eval Signs="Odd",Count=89]</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="count">10</option>
<option name="drilldown">cell</option>
<drilldown>
<condition match="'row.Signs' == "Odd"">
<set token="query">index=_internal|table date_hour,date_mday,date_second</set>
</condition>
<condition>
<set token="query">index=$row.Signs$</set>
</condition>
<condition></condition>
</drilldown>
</table>
</panel>
</row>
<row depends="$query$">
<panel>
<table>
<search>
<query>$query$</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">none</option>
</table>
</panel>
</row>
</dashboard>