All Apps and Add-ons

Drilldown Configurations not showing (don't work) in "Alert Manager" app

woodcock
Esteemed Legend

We deploying Alert Manager with a new client.

Most of my alerts have a "DRILLDOWN_URL" field which contains context-specific SPL.
I am trying to configure this to be a 1-click operation to run using "Drilldown Actions" but these do not work:

_keynamelabelurl
6169aad5005c277d3b3788d5Splunk search to show contributing events for this instance of this alertContributing Eventshttps://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL|u$
6169af6f005c277d3b3788d6Splunk search to show contributing events for this instance of this alertContributing_Events_2

https://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL$

 

 


I still get no drilldowns defined in the investigation screen.

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...