Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Since linkSearch/linkFields/linkSearch are deprecated, how can i control the drilldown of a single form ?

$
0
0
Hi ! According to the documentation, following options in single forms are now deprecated and shall not be used anymore: (while this still works, support may be removed in the future, and this is a failure for app certification check) - linkSearch - linkFields - linkSearch **For reference:** [http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#single][1] Ok, i guess this is related with Splunk 6.3.x single form improvements (cool!) that provides native options such as open in search, like in charts. (this was not the case febore) But the story does not tell how the drilldown can be controlled now... the only drilldown related and non deprecated option is the drilldown activation: > drilldown (all | none) none all:> Drilldown enabled. none: Drilldown> disabled. This option applies to the> element to implement> dynamic drilldown for single values.>> Do not enable this option if you are> implementing drilldown using the> following options to the> element:>> linkFields linkSearch linkView Which will only activate the drilldown of the single, clicking on it will open in search the associated search. Is there a way "non deprecated" to control the drilldown feature ? (What search will be run, where, token re-used...) Isn't it a loss of functionality ! Not an improvement... why putting these options deprecated without providing options with at least the same level of functionality ? A simple example to illustrate, let's say you have a single form associated with a search that will reports the number of relevant errors for your context, you want to provide to the user the drilldown feature a search that will show these error... not how to count it which has no interest for the user... off course the user can modify the search itself... but this is not the idea behind user interfaces... Maybe i missed something ? Honestly this is a bit the same for preLabel and postLabel, it's not easy to understand the real improvement from the functionalities perspective... Thank you in advance ! Cheers, [1]: http://docs.splunk.com/Documentation/Splunk/latest/Viz/PanelreferenceforSimplifiedXML#single

Viewing all articles
Browse latest Browse all 47296

Trending Articles