All Apps and Add-ons

Drilldown Configurations not showing (don't work) in "Alert Manager" app

woodcock
Esteemed Legend

We deploying Alert Manager with a new client.

Most of my alerts have a "DRILLDOWN_URL" field which contains context-specific SPL.
I am trying to configure this to be a 1-click operation to run using "Drilldown Actions" but these do not work:

_keynamelabelurl
6169aad5005c277d3b3788d5Splunk search to show contributing events for this instance of this alertContributing Eventshttps://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL|u$
6169af6f005c277d3b3788d6Splunk search to show contributing events for this instance of this alertContributing_Events_2

https://localhost:8000/en-US/app/alert_manager/search?q=$DRILLDOWN_SPL$

 

 


I still get no drilldowns defined in the investigation screen.

Labels (2)
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...