Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to swap out underlying search in dashboard, using Simple XML

$
0
0
Hi, I want to do this, but I'd prefer to do it in Simple XML. Is it possible? http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/TableChartDrilldown#Swap_out_the_underlying_search I have a table in a dashboard, that shows available log files to the users. When I drill down I want to use the values from the row that was clicked, but I don't want the query from the table to go into the drilldown search. That would make the user search in the summary index - and that doesn't make sense, since the index is part of the row clicked! index=* | dedup sourcetype, index, source | table sourcetype, index, source-15mnow
Once I get it right I'll chance the dashboard to be powered by a summary index. That just makes it even more important that the drilldown search does not contain the table search.

Viewing all articles
Browse latest Browse all 47296

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>