Managing Drilldowns from Query Viewers
Drilldowns provide the ability to investigate details about resources related to what is displayed by query viewers or data monitors. You can get more focused views on particular aspects of a single item, such as an asset, case, event, and so on, in the query result.
You can configure query viewers and data monitors to drill down to one or a combination of the following resources:
-
Active channels
-
Dashboards
-
Query viewers
-
Reports
Each drilldown type has its own options. After you have added one or more drilldowns, Console users can select one by right-clicking on the result and selecting Drilldown > [drilldown name] from the context menu.
Note: In a Custom View Dashboard and on the ArcSight Command Center, only drilldowns to dashboards are supported.