topic How to use the Splunk table variable $row.hostname$ as a dynamic domain name URL in XML CDATA? in Dashboards & Visualizations

How to use the Splunk table variable $row.hostname$ as a dynamic domain name URL in XML CDATA?

hemalalli — Wed, 16 Sep 2015 06:02:58 GMT

How to use the Splunk table variable $row.hostname$ as hyperlink dynamic URL name in XML CDATA?
It is working, except for static URL names like "http://www.google.com" , so if I try to use the variable for the URL name it is not working. It seems like an issue with escaping the special characters. Please help

EG:

<link>
<![CDATA[
   http://$row.hostname$/ 
  ]]>
</link>

Re: How to use the Splunk table variable $row.hostname$ as a dynamic domain name URL in XML CDATA?

woodcock — Wed, 16 Sep 2015 13:35:57 GMT

Try escaping the dollar signs with another dollar sign like this:

<link>
<![CDATA[
http://$$row.hostname$$/ 
]]>
</link>

Re: How to use the Splunk table variable $row.hostname$ as a dynamic domain name URL in XML CDATA?

hemalalli — Fri, 18 Sep 2015 06:09:18 GMT

Hi Woodcock,

Thanks for your reply
When I tried with $$row.hostname$$ , it is routing to http://%24row.hostname%24/ page

Re: How to use the Splunk table variable $row.hostname$ as a dynamic domain name URL in XML CDATA?

alacercogitatus — Sat, 19 Sep 2015 16:30:07 GMT

There is most likely a bug with the way the drilldowns are configured. Try removing the CDATA specification, as those might render the link to plain_text.

<link>
  http://$row.hostname$$/
</link>

Re: How to use the Splunk table variable $row.hostname$ as a dynamic domain name URL in XML CDATA?

hemalalli — Mon, 21 Sep 2015 12:36:50 GMT

Thanks for the answers !

I have notice that ":" in the hostname (eg: www.domain.com:8080) is making some issue, and hence I have split-ed the server and port in the splunk query using eval and used the link as below.

http://$row.servername$:$row.port$/

It is working now 🙂