Dashboards & Visualizations

SavedSearch Post Process drilldown help ??

rakesh_498115
Motivator

Hi, I am using a saved search to display a pie chart , on clickin that i am using a postproces module to show the stats ..but its not working ?? i knew if we use the search module directly we can use the postprocess module..but this is a savedsearch module i have hiddenpostprocess module..its working for the first drilldown . but not working on the second level postprocess drilldown..Please help..

My code..






*
False
1



<span class="server_header"><center><font size="6" face="Times New Roman" color="blue">Stats Dashboard </font></center></span>
<br>
<br>


srch_HistoricalSearch

| search gateway="A" | top Channel
Publisher Layer-Traffic Breakdown(For Past 1hr,Updated every 15 minutes)


true
pie

click1
80%
300px
False

| search Channel="$click1.value$" | stats count by Channel,SiteId,Location

events

10
True
true








Thanx

Tags (1)
0 Karma

sideview
SplunkTrust
SplunkTrust

You're using Splunk's HiddenPostProcess module, and not Sideview's PostProcess module.

Splunk's HiddenPostProcess module can not do any kind of $foo$ substitution, so that $click.value$ token you have is just not being substituted.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...