I'm trying to make a dashboard, so far I have a table which derived from multisearch, because set of fields is different:
| multisearch [search index=x host=y | eval name="A"]
[search index=x host=y | eval name="B"]
[search index=z host=u | eval name="C"]
[search index=w host=l | eval name="D"]
[search index=f host=p | eval name="E"] | stats count by name
Ideally I'd like to have contextual drilldown which would generate a timechart depending on the selected row.
For example if Name D is selected following timechart should be displayed:
search index=w host=l | eval name="D" | timechart count
What is the best way to approach it, if it is doable at all?
Thanks in advance
↧