Dashboards & Visualizations

in-page Drill down in a dashboard

nathanluke86
Communicator

I have a single value panel which is generated from the spl below:

| inputlookup AD_User_LDAP_list where OU=Staff isDeleted=FALSE |stats count

I would like to drill down when clicked and display a list of users in another panel (the results of the spl below):

| inputlookup AD_User_LDAP_list where OU=Staff isDeleted=FALSE |table sAMAccountName

Can someone kindly explain how to do this

TIA

0 Karma

493669
Super Champion

Use below-

 <drilldown target="_blank">
       <link>
          /app/dashboard_examples/form_table2?form.sourcetype=$row.sourcetype$
        </link>
  </drilldown>   

Here target=_blank helps to move to another dashboard and dashboard link needs to be provied in link tag and add token of your sAMAccountName in the link itself.
Remember you have to display sAMAccountName in first dashboard table. because stats count will only show count. and sAMAccountName will be used as token for next dashboard.
You can install Splunk Dashboard Examples app from splunk base which has multiple useful example on drilldown. https://splunkbase.splunk.com/app/1603/

0 Karma
Get Updates on the Splunk Community!

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Dashboard Challenge and Watch the .conf24 Global Broadcast!

The Splunk Community Dashboard Challenge is still happening, and it's not too late to enter for the week of ...