Hi All,
I have recently started working with splunk dashboards and created some small dashboards with charts and drop down filters. In our dashboard there are 6 charts (2 column and 4 pie charts) and a table. we have got a new requirement from users that whenever users select any dimension in any of the chart it should act as a filter to the entire dashboard and the values should change based on the selection.
I have tried with the option of enabling drill down option in the chart properties. But it is not working properly and below are the issues we are facing.
1. While drilling down I have created an event using <set> and saved the value ($click.value$) to a token. But whenever I click on the chart to drill down it will route to another window with search query for the selection. We have to restrict this since it should act as a filter in the dashboard. Kindly let me know the way we can restrict the search query window.
2. I have tried to use the selected token value in another chart query but it is not able to fetch the same. It always shows "Search Waits for an input value" in the chart area. I have used the below query for search option with the specified token value.
..........$click.value$
..........._ActivityName=$ActivityName$ Audience=$Audience$ OSEnv=$osenv_tok$ | eval Hour=strftime(_time, "%H") | search Hour=$Hour_tok$ |stats count by Rule
Kindly check the query and let me know if there are any issues in the way we define the query.
Can anyone please help me to resolve this issue. Any help will be highly appreciated.
Thanks,
Neelakandan N
↧