Dashboards & Visualizations

How do you have a drilldown condition use Field AND Match?

jmillerim2
New Member

I'm trying to build a dynamic drilldown for some columns in my table. I currently have my drilldown set using <condition> and field= and this way each field sends you to a unique URL based on the column. But what I also want is to be able to NOT open up a new window if the field they clicked on is blank. So something like:

<condition field="TFS" match="isnotnull($row.TFS$)> 

but that doesn't work. I also tried nesting the conditions but that didn't work either:

<condition field="TFS">
  <condition match="isnotnull($row.TFS$)> 

Please advise on a way to apply both conditions to a user click in a specific column in a table.

Thank you

0 Karma
1 Solution

vnravikumar
Champion

Hi

Try this

<drilldown>
          <condition match="$row.TFS$ == &quot;&quot;"></condition>
          <condition>
            <link target="_blank">https://www.splunk.com</link>
          </condition>
        </drilldown>

View solution in original post

vnravikumar
Champion

Hi

Try this

<drilldown>
          <condition match="$row.TFS$ == &quot;&quot;"></condition>
          <condition>
            <link target="_blank">https://www.splunk.com</link>
          </condition>
        </drilldown>

jmillerim2
New Member

Thanks for the help! So that actually worked, but because I messed up my explanation of the problem it didn't work with everything else. I actually have 3 different columns that link to different URL's. Here is my drilldown section right now:

      <drilldown>
      <condition match="$row.TFS$ == &quot;&quot;"></condition>
      <condition>
        <link target="NewWindowTFS">$Internal Address$/$row.TFS$</link>
      </condition>
      <condition field="Ticket Number">
        <link target="NewWindowTicket">$Internal Address$/$click.value2$</link>
      </condition>
      <condition field="VSO">
        <link target="NewWindowVSO">$Internal Address$/$row.Product$/_workitems/edit/$row.VSO$</link>
      </condition>
      <condition field="State"></condition>
      <condition field="Agent"></condition>
      <condition field="Release"></condition>
      <condition field="Date Bug Created"></condition>
      <condition field="Date Ticket Created"></condition>
    </drilldown>


So your solution works, but it kills all my other links and only works for my TFS column. Is there a way to have it work for all 3 of my columns that link to a URL?
0 Karma

vnravikumar
Champion

Hi

try this

 <drilldown>
          <condition match="$row.TFS$ != &quot;&quot;">
            <link target="_blank">https://www.splunk.com</link>

          </condition>
          <condition match="$row.TFS$ == &quot;&quot;">
          </condition>
        </drilldown>
0 Karma

jmillerim2
New Member

That doesn't work either. If my TFS column is blank then it doesn't allow any of the other fields work. I still want it to check which column is clicked so the URL's are unique based on what they click, but then don't link at all if the field is blank.

0 Karma

vnravikumar
Champion

try with

<condition  match="$row.TFS$ == &quot;&quot; AND $click.name2$== &quot;TFS&quot;"></condition>
       <condition match="$row.TFS$ != &quot;&quot; AND $click.name2$== &quot;TFS&quot;">
         <link target="NewWindowTFS">http://corp-tfs05:8080/tfs/NDCollection/NetDocuments/_workitems?id=$row.TFS$</link>
       </condition>

if TFS is leftmost column then give $click.name$

0 Karma

jmillerim2
New Member

That did it! Thank you SO much. I didn't think to also match the column name, brilliant.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...