All Apps and Add-ons

Drilldown Configurations not showing (don't work) in "Alert Manager" app

woodcock
Esteemed Legend

We deploying Alert Manager with a new client.

Most of my alerts have a "DRILLDOWN_URL" field which contains context-specific SPL.
I am trying to configure this to be a 1-click operation to run using "Drilldown Actions" but these do not work:

_keynamelabelurl
6169aad5005c277d3b3788d5Splunk search to show contributing events for this instance of this alertContributing Eventshttps://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL|u$
6169af6f005c277d3b3788d6Splunk search to show contributing events for this instance of this alertContributing_Events_2

https://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL$

 

 


I still get no drilldowns defined in the investigation screen.

Labels (2)
Get Updates on the Splunk Community!

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...

Uncovering Multi-Account Fraud with Splunk Banking Analytics

Last month, I met with a Senior Fraud Analyst at a nationally recognized bank to discuss their recent success ...

Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the ...

What has been announced?  In the blog, “Preparing your Splunk Environment for OpensSSL3,”we announced the ...