Dashboards & Visualizations

SavedSearch Post Process drilldown help ??

rakesh_498115
Motivator

Hi, I am using a saved search to display a pie chart , on clickin that i am using a postproces module to show the stats ..but its not working ?? i knew if we use the search module directly we can use the postprocess module..but this is a savedsearch module i have hiddenpostprocess module..its working for the first drilldown . but not working on the second level postprocess drilldown..Please help..

My code..






*
False
1



<span class="server_header"><center><font size="6" face="Times New Roman" color="blue">Stats Dashboard </font></center></span>
<br>
<br>


srch_HistoricalSearch

| search gateway="A" | top Channel
Publisher Layer-Traffic Breakdown(For Past 1hr,Updated every 15 minutes)


true
pie

click1
80%
300px
False

| search Channel="$click1.value$" | stats count by Channel,SiteId,Location

events

10
True
true








Thanx

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You're using Splunk's HiddenPostProcess module, and not Sideview's PostProcess module.

Splunk's HiddenPostProcess module can not do any kind of $foo$ substitution, so that $click.value$ token you have is just not being substituted.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...