Dashboards & Visualizations

Trellis drilldown

manish_singh_77
Builder

Hi Team,

I have a table drill down from single value trellis panel. Since there are few panels, I have to scroll down to see the drill down table details. Is there any way we can show the table drill down just next to selected trellis single value as soon as we click on it.

 

Regards,

Manish  

Labels (1)
Tags (2)
0 Karma
1 Solution

niketn
Legend

@manish_singh_77 the answer to this question lies in HTML independent of Splunk. You need to set an id for element like row/panel or table where you want to set the focus to go on drilldown. I would prefer panel containing table so that selection is in focus but not selected (hihglighted).

Step 1: To make this solution generic, get the current Splunk App Name and Current Dashboard Name from Global tokens using independent search:

  <search>
    <query>| makeresults
    | fields -  _time
    | eval appName="$env:app$",dashboardName="$env:page$"</query>
    <done>
      <set token="appName">$result.appName$</set>
      <set token="dashboardName">$result.dashboardName$</set>
    </done>
  </search>

Step 2: Give id to the panel containing drilldown table i.e. 

    <panel id="drilldown_focus_element">

Step 3: While setting the drilldown token from Single Value Trellis, set the link to same app/dashboard to focus on element using #drilldown_focus_element

        <drilldown>
          <set token="tokName">$trellis.value$</set>
          <link>/app/$appName$/$dashboardName$#drilldown_focus_element</link>
        </drilldown>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@manish_singh_77 the answer to this question lies in HTML independent of Splunk. You need to set an id for element like row/panel or table where you want to set the focus to go on drilldown. I would prefer panel containing table so that selection is in focus but not selected (hihglighted).

Step 1: To make this solution generic, get the current Splunk App Name and Current Dashboard Name from Global tokens using independent search:

  <search>
    <query>| makeresults
    | fields -  _time
    | eval appName="$env:app$",dashboardName="$env:page$"</query>
    <done>
      <set token="appName">$result.appName$</set>
      <set token="dashboardName">$result.dashboardName$</set>
    </done>
  </search>

Step 2: Give id to the panel containing drilldown table i.e. 

    <panel id="drilldown_focus_element">

Step 3: While setting the drilldown token from Single Value Trellis, set the link to same app/dashboard to focus on element using #drilldown_focus_element

        <drilldown>
          <set token="tokName">$trellis.value$</set>
          <link>/app/$appName$/$dashboardName$#drilldown_focus_element</link>
        </drilldown>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

manish_singh_77
Builder

Hi @niketn ,

 

I have one more query, for example, here is the below mentioned box and in my use case, I also have the similar and I am passing one of the values in the custom url drilldown to show the url status.

And now I want to hide that value from the box and but still pass that value as the custom url and show in the drilldown.

Can we do that?

 

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...