All Apps and Add-ons

Drilldown Configurations not showing (don't work) in "Alert Manager" app

woodcock
Esteemed Legend

We deploying Alert Manager with a new client.

Most of my alerts have a "DRILLDOWN_URL" field which contains context-specific SPL.
I am trying to configure this to be a 1-click operation to run using "Drilldown Actions" but these do not work:

_keynamelabelurl
6169aad5005c277d3b3788d5Splunk search to show contributing events for this instance of this alertContributing Eventshttps://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL|u$
6169af6f005c277d3b3788d6Splunk search to show contributing events for this instance of this alertContributing_Events_2

https://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL$

 

 


I still get no drilldowns defined in the investigation screen.

Labels (2)
Get Updates on the Splunk Community!

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...