All Apps and Add-ons

How do I make a clickable hyperlink in search result?

peterlandis
Explorer

If the event has a URL and you want to show the URL in a search table where you can make the URL a clickable link that will go to that URL, how do you do this?

Example: Field is URL in the event and you want to display that URL in a table search aka index = ... | table URL

I want to be able to click on that URL and go to the link as to having to copy the URL and manually paste it into a browser.

vinceisvince
Observer

Is there a way to do this in the generic search results?  AKA not via a dashboard?  

No matter what I put in the field value it only lets me click it say "include/exclude in search results" and I'm thinking there's no way to override this.

 

<link> - No

<a href="> No

http://whatever No

 

vinceisvince_0-1667227605046.png

 

0 Karma

woodcock
Esteemed Legend

There is an example that demonstrates this in the Dashboard Examples App on Splunkbase:

https://splunkbase.splunk.com/app/1603/
0 Karma

renjith_nair
Legend

Hi @peterlandis,

Try this example. You need to prevent the URL escaping by adding a |n ie. <link target="_blank">$row.URL|n$</link> to the token to avoid Splunk adding its own prefix.

<dashboard>
  <label>TokenTest</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| makeresults |eval URL="https://answers.splunk.com/index.html"</query>
          <earliest>-5s@s</earliest>
          <latest>now</latest>
        </search>
        <option name="count">10</option>
        <option name="drilldown">cell</option>
        <drilldown>
          <link target="_blank">$row.URL|n$</link>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂

CarsonZa
Contributor

try taking a look at this, it should get you going
http://docs.splunk.com/Documentation/Splunk/7.1.1/Viz/DrilldownLinkToURL

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...