Hi,
I want to do this, but I'd prefer to do it in Simple XML. Is it possible?
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/TableChartDrilldown#Swap_out_the_underlying_search
I have a table in a dashboard, that shows available log files to the users.
When I drill down I want to use the values from the row that was clicked, but I don't want the query from the table to go into the drilldown search. That would make the user search in the summary index - and that doesn't make sense, since the index is part of the row clicked!
|
Once I get it right I'll chance the dashboard to be powered by a summary index. That just makes it even more important that the drilldown search does not contain the table search.
↧