What XML element is used to pass multiple fields into another dashboard using a dynamic drilldown?

Question

Options

• A<drilldown field_"sources_Field_name">
• B<condition field_"sources_Field_name">
• C<pas_token field_"sources_field_name">
• D<link field_"sources_field_name">

• B
  4% (1)
• C
  4% (1)
• D
  93% (25)

Explanation

In Splunk Simple XML for dashboards, dynamic drilldowns are configured within the <drilldown> element, not <link>, <condition>, or <pass_token>. To pass multiple fields to another dashboard, you would use a combination of <set> tokens within the <drilldown> element. Each <set> token specifies a field or value to be passed. The correct configuration might look something like this within the <drilldown> element: <set token="token1">$row.field1$</set> <set token="token2">$row.field2$</set> <link target="_blank">/app/search/new_dashboard</link> </drilldown> In this configuration, $row.field1$ and $row.field2$ are placeholders for the field values from the clicked event, which are assigned to tokens token1 and token2. These tokens can then be used in the target dashboard to receive the values. The <link> element specifies the target dashboard. Note that the exact syntax can vary based on the specific requirements of the drilldown and the dashboard configuration.

No community discussion yet for this question.