Building a drilldown to a custom query

Looking back at our chart in the Reusing a query section, let's build a custom drilldown that shows the top instances of another field when it is clicked on.

Here is an example dashboard that draws a chart and then runs a custom query when clicked on:

<view template="dashboard.html"> <label>Chapter 9 - Drilldown to custom query</label> <!-- chrome --> <module name="HiddenSearch" layoutPanel="panel_row1_col1" autoRun="True" group="Errors by user"> <param name="search"> sourcetype=* loglevel=error | top user </param> <param name="earliest">-99d</param> <!-- draw the chart --> <module name="HiddenChartFormatter"> <param name="charting.chart">pie</param> <module name="JSChart"> <!-- nested modules are invoked ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.