ExamGecko
Question list
Search
Search

Question 67 - SPLK-1004 discussion

Report
Export

What XML element is used to pass multiple fields into another dashboard using a dynamic drilldown?

A.
<drilldown field_'sources_Field_name'>
Answers
A.
<drilldown field_'sources_Field_name'>
B.
<condition field_'sources_Field_name'>
Answers
B.
<condition field_'sources_Field_name'>
C.
<link field_'sources_field_name'>
Answers
C.
<link field_'sources_field_name'>
Suggested answer: C

Explanation:

In Splunk Simple XML for dashboards, dynamic drilldowns are configured within the <drilldown> element, not <link>, <condition>, or . To pass multiple fields to another dashboard, you would use a combination of <set> tokens within the <drilldown> element. Each <set> token specifies a field or value to be passed. The correct configuration might look something like this within the <drilldown> element:

<drilldown>

<set token='token1'>$row.field1$</set>

<set token='token2'>$row.field2$</set>

<link target='_blank'>/app/search/new_dashboard</link>

</drilldown>

In this configuration, $row.field1$ and $row.field2$ are placeholders for the field values from the clicked event, which are assigned to tokens token1 and token2. These tokens can then be used in the target dashboard to receive the values. The <link> element specifies the target dashboard. Note that the exact syntax can vary based on the specific requirements of the drilldown and the dashboard configuration.

asked 23/09/2024
Ammar Khan
24 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first