Add Multiple Drill-Down In A Single Panel

Add Multiple Drill-Down In A Single Panel

Today we are going to show how you can add more than one drill-down in a single panel.
Suppose we have a dashboard called “Test drill-down new” where we have a table with counts of “method” and “status” field.

Now here we will create two drill-downs, the first one on the “method” column and another on the “status” column so let’s start.

Step 1:
Let me add the result tables of the drill-down panels first.


I have added these two panels next to my original panel these will be my drill-down panels.

Step 2:

Now in the dashboard click on Edit and go to the source code and make the following changes as shown below.

At first change the drill-down option as “cell”
Secondly, create a drill-down tag, within that create two “condition” tag for two drill-down. In the first “condition” tag creates a token as “new” for first drill-down and adds $row.<field name>$ token. In our case, it will affect on method field that’s why token named as $row.method$. In the same fashion do it for the next condition tag. Where token will be $row.status$ and set token as “old”.
In the third and fourth step edit the drill-down panel query, add those tokens “new” and “old” respectively.
Now Save it and reload the page once.
Result:


As you can see it’s working fine, from the “method” column I have select “DELETE” and from “status” column I have select “200

You can also know about :  How To Implement Dark Theme In Splunk Dashboard With The Help Of CSS

If you want to download the source code of the dashboard, please click here
I hope you all have understood this topic on “Add multiple drill-down in a single panel

Happy Splunking!!

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.