Spread our blog

Splunk Drilldown Tokens: $click.value2$ and $click.name2$ (Part-III)

In this series of Splunk drilldown tokens we will try to cover all the possible aspects of Splunk drilldown functionalities from basic drilldown features like the link to search, link to the dashboard, and link to URL to advanced feature all drilldown tokens and many more insight ideas of Splunk advance drilldown. So if you are interested in making your dashboard customizable and interactive then stay tuned to the Splunk drilldown series.

Part-I : Splunk Drilldown Tokens: $click.name$ (Part-I)

Part-II : Splunk Drilldown Tokens: $click.value$ (Part-II)

$click.value2$

$clcik.value2$ is a opposite of $clcik.value$. As we previously discussed in our previous blog $click.value$ will take the field value of the X-axis field. The same way $click.value2$ will take the field value of the Y-axis field.

In the case of chart viz it is nothing different previously it was tking X-axis now it will take Y-axis.

For event viz and single viz, it is the same as $click.value$.

For the table, we will demo this thing,

In the table viz, Use this token to capture the specific table cell value that users click.

We have this dashboard,

Now we added this token in the same way we did in the first blog it’s nothing different.

Result:

Now using this token wherever we click, the value from that particular cell will pass.

This is not applicable for trellis viz.

$click.name2$

On the oter side $click.name2$ is completely opposite of $click.name$. As we all know that $click.name$ will pass X-axis field name same way $click.name2$ will pass Y-axis field name.

You can also know about :  How to Create Multi-Link Drilldown from a Stacked Column Chart in Splunk

In the case of chart viz it is nothing different previously it was tking X-axis now it will take Y-axis.

For event viz and single viz, it is the same as $click.name$.

In the case of table viz it will pass the clicked field name. We will demonstrate this one.

Result:

Here we did click on the bytes field value, that’s why it is passing the bytes field name with the token.

Happy Splunking!!

What’s your Reaction?
+1
+1
+1
1
+1
+1
2
+1
+1
1

Spread our blog

LEAVE A REPLY

Please enter your comment!
Please enter your name here