All Apps and Add-ons

How do you extract drilldown from notable event and insert as a field in a grouped notable event?

allisonwalther
Path Finder

It appears that the drilldown field of a notable event disappears when that event is grouped with other events. How could I retain that information? I would like my grouped notable event to display all of the drilldowns of the events that compose it.

Single notable event has drilldown link:
alt text

Grouped notable event does not have any information about drilldown links for individual events:
alt text

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...