All Apps and Add-ons

raw log link in Splunk dashboard

smolcj
Builder

hi,
is it possible to keep a link to the raw log file in splunk? if user want to see the file in it's exact format. How to show the url source file in showsource option? how to get sid of the file?
Scenario is like, i have a dshboard with a pull down box that populating sourcefilenames and the dshboard is in sideview advanced XML. i have created an Html module like this

         <module name="HTML" layoutPanel="panel_row1_col1">
                    <param name="html">
                    <![CDATA[<p> View Your Source File <a href="http://myhostname:8000/en-US/app/myapp/show_source?sid="$.info_search_id.$"&offset=0"> here </a></p>]]> 
                 </param>
                </module>

the issue i am facing is .info_search_id. is not passing any value to the url, i tried info_id also..
Please help
Thank you

1 Solution

smolcj
Builder

It is sid=$results.sid$ in side view 🙂
check out host:port/en-US/app/sideview_utils/custom_keys
Thanks for your valuable time

View solution in original post

smolcj
Builder

It is sid=$results.sid$ in side view 🙂
check out host:port/en-US/app/sideview_utils/custom_keys
Thanks for your valuable time

Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...