https://community.splunk.com/t5/Splunk-Search/Handling-spaces-in-field-values/m-p/686115#M234096 <P>URLs with spaces in them must be encoded.&nbsp; Use the <FONT face="courier new,courier">urlencode</FONT> command available with the Webtools Add-on (<A href="https://splunkbase.splunk.com/app/4146" target="_blank">https://splunkbase.splunk.com/app/4146</A>).</P> Wed, 01 May 2024 18:39:14 GMT richgalloway 2024-05-01T18:39:14Z https://community.splunk.com/t5/Splunk-Search/Handling-spaces-in-field-values/m-p/686113#M234094 <H2>Description</H2><P>How can I produce a URL in an alert email that uses field values, either by in-line results or in the body of the email. When an alert is triggered an email is sent with field dashboard_url. For projects with no spaces in the name, the URL is clickable. If there is a space, the URL contains only up to the space and is broken.</P><H4>Sample query</H4><P>&nbsp;</P><LI-CODE lang="markup">| makeresults format=json data="[{\"project\":\"projectA - Team A\"},{\"project\":\"projectB\"}]" | eval dashboard_url="https://internal.com:8000/en-US/app/search/dash?form.q_project=".project.""</LI-CODE><P>&nbsp;</P><P>Result: <A href="https://internal.com:8000/en-US/app/search/dash?form.q_project=projectA" target="_self">https://internal.com:8000/en-US/app/search/dash?form.q_project=projectA</A> - Team A</P><H2>Workarounds attempted</H2><P>I tried building the dashboard_url in the email body using results.project. The same condition occurs, projects with spaces get a broken link.</P> Wed, 01 May 2024 18:29:45 GMT https://community.splunk.com/t5/Splunk-Search/Handling-spaces-in-field-values/m-p/686113#M234094 Badger 2024-05-01T18:29:45Z https://community.splunk.com/t5/Splunk-Search/Handling-spaces-in-field-values/m-p/686115#M234096 <P>URLs with spaces in them must be encoded.&nbsp; Use the <FONT face="courier new,courier">urlencode</FONT> command available with the Webtools Add-on (<A href="https://splunkbase.splunk.com/app/4146" target="_blank">https://splunkbase.splunk.com/app/4146</A>).</P> Wed, 01 May 2024 18:39:14 GMT https://community.splunk.com/t5/Splunk-Search/Handling-spaces-in-field-values/m-p/686115#M234096 richgalloway 2024-05-01T18:39:14Z