topic Re: How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table? in Splunk Search

How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

krishnarajapant — Tue, 15 Sep 2015 04:51:51 GMT

Hi Experts,

I want to drilldown from my table in the dashboard to an external URL for which has to pick the hostname of the URL from the table hostname field.

Below is my drilldown code in table tag.

<condition field="service_name">
            <link>
              <![CDATA[

              http://$row.hostname$/runprocess.dsp?interface_instance_id=$row.interface_instance_id/]]>
           </link>
<condition>

When I hard-code the host name to specific host, then the drilldown is working as expected, whereas if I'm using variable, then drilldown behavior is not working.

Not sure what am I missing here.

-Krishna Rajapantula

Re: How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

krishnarajapant — Tue, 15 Sep 2015 04:56:52 GMT

Re: How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

krishnarajapant — Tue, 15 Sep 2015 04:57:39 GMT

Updated the code below in a screenshot.

-Krishna Rajapantula

Re: How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

krishnarajapant — Tue, 15 Sep 2015 14:20:40 GMT

Hi Experts,

Any solution available for the above query?

-Krishna Rajapantula

Re: How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

somesoni2 — Tue, 15 Sep 2015 18:38:34 GMT

Try something like this

<dashboard>
  <label>Dynamic WebSite Launcher</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval site="google microsoft bing apple" | table site | makemv site | mvexpand site</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
         <option name="drilldown">row</option>    
        <drilldown target="_blank">          
             <link>
                 http://www.$row.site$.com
            </link>
       </drilldown>
      </table>
    </panel>
  </row>
</dashboard>