Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to swap out underlying search in dashboard, using Simple XML

$
0
0
Hi, I want to do this, but I'd prefer to do it in Simple XML. Is it possible? http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/TableChartDrilldown#Swap_out_the_underlying_search I have a table in a dashboard, that shows available log files to the users. When I drill down I want to use the values from the row that was clicked, but I don't want the query from the table to go into the drilldown search. That would make the user search in the summary index - and that doesn't make sense, since the index is part of the row clicked! index=* | dedup sourcetype, index, source | table sourcetype, index, source-15mnow
Once I get it right I'll chance the dashboard to be powered by a summary index. That just makes it even more important that the drilldown search does not contain the table search.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>