Building Advanced Dashboards - Implementing Splunk: Big Data Reporting and Development for Operational Intelligence - page 216

Building a drilldown to another panel
Another option for a drilldown is to draw a new panel on the same dashboard.
This lets you create various drilldowns without redrawing the screen, which
might be less jarring to the user. Here is the XML:
<?xml version="1.0"?>
<view template="dashboard.html">
<label>Chapter 8 - Drilldown to new graph</label>
<!-- chrome should go here -->
<module
name="HiddenSearch"
layoutPanel="panel_row1_col1"
autoRun="True"
group="Errors by user">
<param name="search">
sourcetype="impl_splunk_gen" loglevel=error | top user
</param>
<param name="earliest">-24h</param>
<module name="HiddenChartFormatter">
<param name="charting.chart">pie</param>
<!-- draw the first chart -->
<module name="JSChart">
<!-- the modules inside the chart will wait for
interaction from the user -->
<module name="HiddenSearch">
<param name="earliest">-24h</param>
<param name="search">
sourcetype="impl_splunk_gen" loglevel=error
user="$user$" | timechart count by logger
</param>
<module name="ConvertToIntention">
<param name="intention">
<param name="name">stringreplace</param>
<param name="arg">
<param name="user">
<param name="value">$click.value$</param>
</param>
</param>
</param>
<!-- print a header above the new chart -->