# Drilldown like splunk in kibana

**URL:** <https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028>\
**Category:** Kibana\
**Created:** [March 29, 2018, 6:13am UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028 "2018-03-29T06:13:54Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![meetdave2611997](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Post date:** [March 29, 2018, 6:13am UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/1 "2018-03-29T06:13:54Z")

</div>

I am creating a visualization and i want to implement drilldown like splunk does. So when user clicks on particular item in visualization kibana opens a new search page with that criteria.

How can i achieve this?

Thanks,  
Meet Dave

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [March 29, 2018, 7:20pm UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/2 "2018-03-29T19:20:04Z")

</div>

Add the visualization to a dashboard, clicking on an element will add the filter to the dashboard.

---

<div class="post-metadata">

**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\
**Post date:** [March 30, 2018, 3:02am UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/3 "2018-03-30T03:02:27Z")

</div>

@meetdave2611997 For which type of visualization do you want to implement drilldown? For instance, for Data Tables and Saved Searches, drill down can be configured for a specific field by changing the Field Type to **URL** in **Management -\> Index Patterns** and specifying the **URL Template** with the appropriate target URL.

---

<div class="post-metadata">

**Author:** ![meetdave2611997](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Post date:** [March 30, 2018, 8:21am UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/4 "2018-03-30T08:21:39Z")

</div>

@vinodr I want it to be applicable in all visualizations for example:- i have one single metric view which shows document count of txt files. now when i click on count a discover page opens with criteria file.type:txt so that it will show me all events that contains file.type:txt

---

<div class="post-metadata">

**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\
**Post date:** [March 30, 2018, 2:42pm UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/5 "2018-03-30T14:42:01Z")

</div>

@meetdave2611997 You may be able to use Visual Builder to achieve this ([Here is the link to Demo app](https://demo.elastic.co/app/kibana#/visualize/edit/ba53d7d0-6b1d-11e7-90da-29dd6409b5ed?_g=(refreshInterval:(display:Off,pause:!f,value:0),time:(from:now-7d,mode:quick,to:now))&_a=(filters:!(),linked:!f,query:(language:lucene,query:(query_string:(query:'*'))),uiState:(),vis:(aggs:!(),params:(axis_formatter:number,axis_position:left,background_color_rules:!((id:'99b63690-3425-11e8-9e87-1dc9c9adb411')),bar_color_rules:!((bar_color:'rgba(104,188,0,1)',id:c95e8a20-4f9f-11e7-a7bf-c565ab3041ca,opperator:lt,value:2147483648),(bar_color:'rgba(252,220,0,1)',id:ed90e5a0-4f9f-11e7-a7bf-c565ab3041ca,opperator:gte,value:2147483648),(bar_color:'rgba(211,49,21,1)',id:f779abb0-4f9f-11e7-a7bf-c565ab3041ca,opperator:gte,value:3221225472)),drilldown_url:'https:%2F%2Fdemo.elastic.co%2Fapp%2Fkibana%23%2Fdiscover%3F_g%3D(refreshInterval:(display:Off,pause:!!f,value:0),time:(from:now-7d,mode:quick,to:now))%26_a%3D(columns:!!(_source),index:!'9e41d8a0-cf9d-11e7-ab3d-8f39c5a87382!',interval:auto,query:(language:lucene,query:!'_exists_:system.filesystem.device_name!'),sort:!!(!'@timestamp!',desc))',filter:'',gauge_color_rules:!((id:b15cf120-3426-11e8-9e87-1dc9c9adb411)),gauge_inner_width:10,gauge_style:half,gauge_width:10,id:a2feee60-4f9f-11e7-a7bf-c565ab3041ca,index_pattern:'metricbeat-*',interval:auto,markdown:'+%5B%7B%7Baverage_of_system_filesystem_used_bytes.last.raw%7D%7D%5D(https:%2F%2Fdemo.elastic.co%2Fapp%2Fkibana%23%2Fdiscover)',series:!((axis_position:right,chart_type:line,color:'rgba(0,156,224,1)',fill:0.5,filter:'',formatter:bytes,id:a2feee61-4f9f-11e7-a7bf-c565ab3041ca,label:'',line_width:1,metrics:!((field:system.filesystem.used.bytes,id:a2feee62-4f9f-11e7-a7bf-c565ab3041ca,type:avg)),point_size:1,seperate_axis:0,split_mode:everything,stacked:none,terms_field:system.filesystem.device_name,terms_order_by:a2feee62-4f9f-11e7-a7bf-c565ab3041ca,terms_size:'5')),show_grid:1,show_legend:1,time_field:'@timestamp',type:markdown),title:'TS:+Top+10+Filesystem+Consumers',type:metrics))))

 ![Metric-URL](https://us1.discourse-cdn.com/elastic/original/3X/3/8/38ee59aac2e8bad149d41639d670feb710b776a2.JPG)

---

<div class="post-metadata">

**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\
**Post date:** [March 30, 2018, 2:55pm UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/6 "2018-03-30T14:55:20Z")

</div>

@meetdave2611997 Also, there is an open feature request: [https://github.com/elastic/kibana/issues/12560](https://github.com/elastic/kibana/issues/12560)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 27, 2018, 2:55pm UTC](https://discuss.elastic.co/t/drilldown-like-splunk-in-kibana/126028/7 "2018-04-27T14:55:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
