topic Re: Dashboard drilldown hyperlink to ITSI Episode Review in Splunk ITSI

How to direct users to the ITSI Episode Review dashboard from the drill-down link?

m_kostiew — Tue, 06 Oct 2020 22:37:50 GMT

I have a "normal" dashboard created that pulls together some ITSI data for my end users. In the table of the dashboard, I want to make it so the drill-down link will direct users to the ITSI Episode Review dashboard instead of the usual, traditional search, and for the specific grouped notable event, not just the dashboard itself.

I've used the event_identifier_hash, service ID(s), and the event_id values from the notables, in many variations of the URL; I can't seem to get the URL pinned down to that unique event/notable.

Is it even possible?

Thanks!

Re: Dashboard drilldown hyperlink to ITSI Episode Review

Fouad — Wed, 23 Sep 2020 08:09:12 GMT

same problem here, any updates?

Re: Dashboard drilldown hyperlink to ITSI Episode Review

wsveum — Wed, 03 Jan 2024 09:00:21 GMT

I suppose you have found a solution to this by now. But if not, here is how i solved it by using the itsi_group_id field from index=itsi_grouped_alerts:

https://<your_splunk_instance>/en-GB/app/itsi/itsi_event_management?earliest=-24h&episodeid=$result.itsi_group_id$

I used this to make a link from ServiceNow directly to the episode in ITSI Alerts and Episodes.

In the Configure Action part of the Create/update ServiceNow Incident in the NEAP, i put the following in Custom Fields to make the link:

comments=[code]<a href="https://<your_splunk_instance>/en-GB/app/itsi/itsi_event_management?earliest=-24h&episodeid=$result.itsi_group_id$" target="_blank">Link to Splunk ITSI Alerts and Episodes<br></a>[/code]

Re: Dashboard drilldown hyperlink to ITSI Episode Review

skramp — Tue, 30 Jan 2024 08:22:32 GMT

If you have the episodeID, you can link directly to it:

https://YOURSPLUNKSERVER:8000/en-US/app/itsi/itsi_event_management?earliest=-7d%40h&latest=now&form.earliest_time=-7d%40h&form.latest_time=now&episodeid=YOUREPISODEID

Please be aware of the time span, if episode is older than 7d it won't be found because in THIS link -7d is set.