Dashboards & Visualizations

How to dynamically update table based on selected pie chart slice?

DBrenman
Engager

I have a dashboard with 1) a pie chart the shows clear groupings of my data and 2) a table that shows all of the original data. I would like to enable a user to click on a single pie slice, and have only the corresponding data show up in the table.

Is this possible? If so what type of callback would I be looking at?

Thank you!

0 Karma
1 Solution

somesoni2
Revered Legend

It's definitely possible as long as both visualization are derived from same base search. IMO, You would need to setup Contextual drilldown, See below link for more details on that OR share your current dashboard XML.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/Understandbasictableandchartdrilldownactions#B...

View solution in original post

somesoni2
Revered Legend

It's definitely possible as long as both visualization are derived from same base search. IMO, You would need to setup Contextual drilldown, See below link for more details on that OR share your current dashboard XML.

http://docs.splunk.com/Documentation/Splunk/6.5.1/Viz/Understandbasictableandchartdrilldownactions#B...

frobinson_splun
Splunk Employee
Splunk Employee

In case it's helpful, we have some updated drilldown topics in our 6.6.x docs. The contextual drilldown topic has some examples of triggering content changes that you might find useful:

http://docs.splunk.com/Documentation/Splunk/6.6.0/Viz/ContextualDrilldown

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...