I have some metrics that show a number of events on my dasboard. I would like to be able to click on the metric and it open up a dashboard where it gives me more information about the data instead of just the number of events shown in the metric.
@stephenb thanks, I did look at that one however it seems that only certain controls can use that feature! I am using a metric control I will post you a picture of what I mean, and it does not have the option to create a drill down so there must be some other way right? because it is important to transition from a count of events to the events themselves, of course it is possible to do this (would make Kibana practically useless if it didn't do it) so how is it done?
I want to click on the above and be taken to a dashboard that lists out each suspicious event.
Thanks, ooooooh that, I think I tried that but it was like stripped down and less powerful than the metric component and so I wasn't able to select the stuff I needed to get the correct metric to show? I'll revisit it and have another crack at it, but the gist I got was that the lens thing was a simplification of the previous controls and not as flexible/powerful.
Hi, I apologise for the late reply, got thrown into a COVID lockdown here and it threw me a bit of a curve ball. I am however back and revisiting this project again.
I think I have managed to convert to lens metric, however some things I was using previously I can't seem to find! I can't find where I can make the numbers change from green to red like I was in the old metric control, and I can't find where I can set the size of the number (so I'm using size 45 on the old metric).
@stephenb Also, I can't see the option for it to have a drilldown? What am I doing wrong???? I've switched to TSVB Metric now and it is autosizing the number to size 45 and I can do the colors with it, but again there is no option for drilldown with it??? Are you sure it has drilldown from the metric in TSVB?
Thanks, yea it baffles me that something like a metric cannot drill down. So in my case, I have a metric that shows me things like the number of Suricata alerts, and then when I click it, i would like to open up a dashboard that has a table view of all the suricata alerts in detail. I would think that is quite a common use case surely?
Thanks but I'm space poor on my dash, I don't think I could make the space for a dedicated label. I might just wait and hope that drill down can come to metric, I can manually switch dashboard for the interim, but it would be nice to click the metric and see the results that power it is all, quite perplexing that what I would imagine is an every day use case is totally absent.
Oh yes I could fit a nav bar at the top, i was more concerned with doing a label for each of my metrics because I have a lot of them I'd probably consume 1/5 of my dash with labels if i went that route but certainly a small navigation bar at the top could be something that would work for me as the next best thing from a drill down yea.