Dashboards & Visualizations

Drilldown to new dashboard almost working !

Mahieu
Communicator

Hey guys,

I've built a very basic dashboard that has one panel.
That panel is showing the results of a basic "top" command in a pie format.
Let's say i have a search that looks like :
xxx | top myfield

I'd like to be able to click on a piece of the pie (myfield=sample_value) and be redirected to another dashboard with the myfield=sample_value" parameter in the url.
Of course, i've checked that the dashboard at http://mysplunk/app/search/second_dashboard?myfield=sample_value works just fine.

Still, i can't find a way to post this to the dashboard.

I've created the intention with the following :

<module name="ConvertToIntention">
<param name="intention">
<param name="name">addterm</param>
<param name="arg">
<param name="series">$click.value$</param>
</param>
</param>

This seems to work, i've checked by adding :

<module name="ConvertToDrilldownSearch">
<module name="JobProgressIndicator"/>
<module name="SimpleResultsHeader">
<param name="headerFormat">You havec clicked on $click.value$</param>
<param name="entityName">events</param>
</module>

And the new line shows up just fine saying :
"You have clicked on sample_value"

A link to the second dashboard (without the ConverttoIntention part) works just fine like this :

<module name="ConvertToDrilldownSearch">
<module name="ViewRedirector">
<param name="viewTarget">second_dashboard</param>
</module>
</module> 

If I'm using this ConvertToDrilldownSearch and the ConvertToIntention at the same time, Splunk takes me to :
http://mysplunk/en-US/app/search/second_dashboard?q=search%20xxxxx%22%20myfield%3D%22sample_value%22...

I've tried with
second_dashboard?myfield=sample_value
but it won't solve the problem

I'm nearly there but ... something's missing.

Has anyone got a clue on what i'm doing wrong ?

Thanks a lot in advance for your help.

Mat

Tags (2)
1 Solution

ludoz13
Path Finder

Hello guy,

Yuu just need to use this following module :




/app/dashboard_examples/form_table2?form.sourcetype=$click.value$


View solution in original post

ludoz13
Path Finder

Hello guy,

Yuu just need to use this following module :




/app/dashboard_examples/form_table2?form.sourcetype=$click.value$


Mahieu
Communicator

It works !
Thanks a lot. Another question though :
How do i open the new dashboard in another window ?

Thanks in advance

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...