Create a dashboard drilldown

A dashboard drilldown opens another dashboard and can carry the time range, filters, and query with it. Use one to continue from a summary into a more specific view.

For example, a dashboard can show logs and metrics for several data centers. A drilldown can open a dashboard for the one data center or server you select.

Refer to Drilldowns to choose a drilldown type.

To create a dashboard drilldown, you need:

• All privilege for the Dashboard feature in Kibana
• An existing dashboard with at least one panel that supports drilldowns

• A destination dashboard.

The following panel types support dashboard drilldowns:

• Visualizations that use a data view
• Serverless Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability Generally available This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. Stack 9.4+ The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Generally available since 9.4 This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. Visualizations based on an ES|QL query
• Vega visualizations
• Maps
• Legacy Kibana visualization types, such as TSVB, Aggregation-based, and Timelion

A drilldown is compatible only with indexed fields. Fields created at query time are not supported. Refer to Values that cannot open a drilldown.

This example opens another dashboard from a panel. Follow it with the sample data, or use your own dashboards.

1. Add the Sample web logs data. This also adds the [Logs] Web Traffic dashboard.

2. If you don't already have a dashboard to open from the panel, create one. This example uses a dashboard named Detailed logs.

   Create the Detailed logs dashboard

   1. Create a new dashboard.

      • Serverless Elastic Cloud Serverless projects are autoscaled environments, fully managed by Elastic and available on Elastic Cloud. Availability Generally available This functionality is generally available and ready for production usage. Serverless interfaces and procedures might differ from classic Elastic Stack deployments. Stack 9.2+ The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Generally available since 9.2 This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. In the application menu, select Add → From library.
      • Stack 9.0-9.1 The Elastic Stack includes Elastic's core products such as Elasticsearch, Kibana, Logstash, and Beats. Availability Generally available from 9.0 to 9.1 This functionality is generally available and ready for production usage. Unless stated otherwise on the page, this functionality is available when your Elastic Stack is deployed on Elastic Cloud Hosted, Elastic Cloud Enterprise, Elastic Cloud on Kubernetes, and self-managed environments. This documentation corresponds to the latest patch available for each minor version. If you're not using the latest patch, check the release notes for changes. In the application menu, select Add from library.

   2. Add the [Logs] Visits panel.

   3. Save the dashboard. In the Title field, enter Detailed logs.

3. Open the [Logs] Web Traffic dashboard and select Edit.

4. Set a search, a filter, and a time range for the drilldown to carry.

   Search: extension.keyword: ("gz" or "css" or "deb")
   Filter: geo.src: US
   Time filter: Last 30 days, or a 30-day period that contains data, depending on when you installed the sample data.

5. Hover over the [Logs] Errors by host panel, open the panel menu, then select Create drilldown.

6. Select Go to dashboard.

   1. In Name, enter a name. For example, View details.
   2. From Choose destination dashboard, select Detailed logs.
   3. To keep the geo.src filter, the KQL query, and the time filter, select Use filters and query from origin dashboard and Use date range from origin dashboard.
   4. Select Create drilldown.

7. Save the dashboard.

8. On the [Logs] Errors by host table, select + on a value, then select View details.

   
   

The Detailed logs dashboard opens with the geo.src filter, the KQL query, and the time range you set.

• Manage drilldowns

• Drilldowns
• Create a URL drilldown
• Create a Discover drilldown