All Apps and Add-ons

Sideview pager and drilldown - no drilldown results after page 1

aholzer
Motivator

I have built a dashboard using Sideview Utils that is supposed to display a table and have the capability to drilldown. I'm using the pager module to paginate the results in pages of 20 rows. I have designed the dashboard to allow the user to click on any row and get two new views into the value selected (a drilldown). The original searches and it's results get displayed correctly, and if you click on any of the values, the two drilldowns get displayed correctly. However, if you change the page of the original results to anything other than page 1, the two drilldowns do not display any data if you click any of the rows. When you switch back to page 1, then you see the results that you had requested being displayed.

It would seem that the "pager" module of the original search is being applied to the results from the drilldown search. I would like to have this stop happening, any suggestions? Thanks in advance for the assistance.

Here's the relevant part of xml of the dashboard:

<module name="Search" layoutPanel="panel_row1_col1" autoRun="True">
    <param name="search">
      ...
    </param> <!-- search to use -->
    <param name="earliest">-1d</param><!-- yesterday -->
    <param name="latest">now</param>

    <module name="Pager">
      <param name="count">20</param> <!-- display 20 rows per page -->

      <module name="Table"><!-- display results in a tabular format-->
        <param name="rowClass">$row.fields.SIDE$</param> 
        <param name="hiddenFields">...</param> <!-- fields that should not be displayed but are usable downstream -->

        <module name="HTML"> 
          <param name="html"><![CDATA[
            <h2>You clicked on the ID: "$row.fields.ID$"</h2>
            <h2>Correlation ID for the clicked row is: "$row.fields.CORR_ID$"</h2>
            ]]>
          </param>
        </module>

        <module name="Search" layoutPanel="panel_row1_col1"> <!-- search for the drilldown -->
          <param name="search">
            ...
          </param>
          <param name="earliest">-1d</param>
          <param name="latest">now</param>

          <module name="Pager">
            <param name="count">10</param>

            <module name="HTML">
              <param name="html"><![CDATA[
                <p>Table view</p>
                ]]>
              </param>
            </module>
            <module name="Table" layoutPanel="panel_row1_col1">
              <param name="rowClass">$row.fields.SIDE$</param>
            </module>

            <module name="HTML">
              <param name="html"><![CDATA[
                <p>Full log view</p>
                ]]>
              </param>
            </module>
            <module name="EventsViewer" layoutPanel="panel_row1_col1">
              <param name="displayRowNumbers">True</param>
              <param name="fields">...</param>
            </module>
          </module>
        </module> 
      </module> 
    </module>
  </module>
1 Solution

sideview
SplunkTrust
SplunkTrust

I think you must have a version that's earlier than 2.2.5. This bug was reported and fixed last November. Upgrade to the latest (2.4.3), and the behavior will go away.

The Sideview Utils page doesn't have just pretty screenshots and testimonials. We also have nice dry release notes for you to slog through. 😃

You'll see this bug specifically in the notes under 2.2.5.

View solution in original post

sideview
SplunkTrust
SplunkTrust

I think you must have a version that's earlier than 2.2.5. This bug was reported and fixed last November. Upgrade to the latest (2.4.3), and the behavior will go away.

The Sideview Utils page doesn't have just pretty screenshots and testimonials. We also have nice dry release notes for you to slog through. 😃

You'll see this bug specifically in the notes under 2.2.5.

jpass
Contributor

Is this an bug that resurfaced in 2.5 & 2.6.3? I'm using a Table with embedded html,button, gate module to push to another gate module. The receiving gate module has a search that goes to a tab and switcher module which renders various content.

Seems to work great for the first page of results in the drilldown table but if I switch pages, nada.

0 Karma

sideview
SplunkTrust
SplunkTrust

Not with the straight "update" links because those only know about apps on Splunkbase. But follow the link on the Sideview site and accept the license, that'll get you a tar.gz of the latest version. Save that to your desktop then go to "Manager > Apps > Install App From File". Check the checkbox that says "upgrade existing app", and off you go.

0 Karma

aholzer
Motivator

I had to download the tar.gz from the Sideview Utils page and use the "install app from file" feature on the manager > apps UI.

0 Karma

aholzer
Motivator

Ah, I see. Thanks for the quick response. I am in fact using v2.2.2.

Is there a way to upgrade using the Manager > apps UI? The only versions I see available there are 1.3.5 and under.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...