topic Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard? in Splunk Search

Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

rromanelli — Tue, 16 May 2017 14:00:12 GMT

I can hard-code a static URL, but when I pass a value, Splunk adds the host to the URL to direct the link internally.

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

rjthibod — Tue, 16 May 2017 14:31:05 GMT

Can you share your XML? I am not real clear on what exactly you are trying to do.

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

rromanelli — Tue, 16 May 2017 14:41:00 GMT

  <table id="link">
    <title>Executions</title>
    <search>
      <query>index=vzwindex Primary.testStatus=$status$ Primary.className=$className$ | eval Name='Primary.methodName' | eval Duration=tostring('Primary.testExecutionDuration', "duration") | eval ReportId=tostring('Primary.reportId') | eval link='Primary.windTunnelReport'  | eval user='Primary.username' | rename Primary.model  as Devices, Primary.device  as "Devices IMEI", Primary.testExecutionStart  as "Start Time", Primary.testExecutionEnd  as "End Time",  Primary.testStatus as Status |  table Name "Start Time" "End Time" Devices  "Devices IMEI" Status link</query>
      <earliest>$TimePicker.earliest$</earliest>
      <latest>$TimePicker.latest$</latest>
    </search>
    <option name="count">5</option>
    <option name="dataOverlayMode">none</option>
    <option name="drilldown">cell</option>
    <option name="percentagesRow">false</option>
    <option name="rowNumbers">true</option>
    <option name="totalsRow">false</option>
    <option name="wrap">true</option>
    <drilldown>
      <link target="_blank">$click.value2$</link>
    </drilldown>
  </table>

I click where there is a link to a unique report in our system. We store the URL in 'Primary.windTunnelReport'.

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

rjthibod — Tue, 16 May 2017 15:18:45 GMT

Try using the token filter |n. Also, change the use of target="_blank"

So you would edit the drilldown action to be

     <drilldown target="_blank">
       <link>$click.value2|n$</link>
     </drilldown>

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

rromanelli — Tue, 16 May 2017 18:33:11 GMT

Thanks, but no. It still prepends :8000/en-US/app/search

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

niketn — Tue, 16 May 2017 20:32:39 GMT

@rromanelli, which version of Splunk are you using? Whether the URL in link column complete like https://answers.splunk.com/answers/<somenumber> or partial like <somenumber>

If the URL is complete the answer by @rjthibod should work (_blank should work, and you can also restrict click only to link column in the table using code below).

  <drilldown>
    <condition field="link">
      <link target="_blank">$click.value2|n$</link>
    </condition>

In order to test hard-code complete static URL in your directly in you drilldown event handler for link and see whether the page opens or not. If it does not then there is something wrong with the URL. If it launches fine then check the value being populated in the table.

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

kamlesh_vaghela — Wed, 17 May 2017 05:26:50 GMT

Hi rromanelli,

I also had the same issue and did it by using javascript.
I'm not sure you are Ok with javascript or not, So can you please try below code?

XML

<form script="myjs.js">
  <label>test</label>
  <row>
    <panel>
      <table id="table_link">
        <search>
          <query>index="_internal" | top 5 sourcetype | eval link="http://www.google.com"</query>
          <earliest>-1h@h</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">20</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
        <drilldown>
          <condition field="*">
          </condition>
        </drilldown>
      </table>
    </panel>
  </row>
</form>

Javascript :

 require([
    'underscore',
    'jquery',
    'splunkjs/mvc',
    'splunkjs/mvc/tableview',
    'splunkjs/mvc/simplexml/ready!'
], function(_, $, mvc, TableView) {
    var utils = require("splunkjs/mvc/utils");
    var CustomRangeRenderer = TableView.BaseCellRenderer.extend({
        canRender: function(cell) {
            return _(['link']).contains(cell.field);
        },
        render: function($td, cell) {
            $td.html("<div style='cursor:pointer;'>"+cell.value+"</div>").on("click", function (e){
                console.log(cell.value);
                utils.redirect(cell.value,"_blank");
            });
        }
    });
    //List of table IDs to add icon
    var tableIDs = ["table_link"];
    for (i=0;i<tableIDs.length;i++) {
        var sh = mvc.Components.get(tableIDs[i]);
        if(typeof(sh)!="undefined") {
            sh.getVisualization(function(tableView) {
                // Add custom cell renderer and force re-render
                tableView.table.addCellRenderer(new CustomRangeRenderer());
                tableView.table.render();
            });
        }
    }
});

Let me know if it is useful.

Thanks
Kamlesh

Re: Is it possible to pass a URL (Not static) from a search field to create a clickable link in a dashboard?

rromanelli — Wed, 17 May 2017 11:01:42 GMT

Hi Niketlilay,

This worked! Thank you so much!

Rick