Event Handlers • Room 2

Drilldown Actions

Drilldowns translate a user's click on a chart or table into a meaningful action: setting a token, navigating to another dashboard, or opening a new search.

The `<drilldown>` XML element supports `<set>` (to update tokens), `<link>` (to navigate), and `<eval>` for dynamic URL construction.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

Drag items to their correct zone (or tap item then tap zone on mobile)

Updates a token value when a chart element is clicked

Navigates the browser to a different dashboard or URL

Dynamically computes a value using SPL-like expressions

Opens the underlying events in a new Splunk Search window

<set>

<link>

<eval>

Search Drilldown