ip address link to external url

[ulikabbq]

I want to be able to click an ip addres in a dashboard panel and it link to http://www.tcpiputils.com/browse/ip-address/<ipaddress> where is passes the ip address and adds it to the end of the url.

Is this possible?

[somesoni2]

Here you go

<dashboard>
  <label>DrilldownFromTable</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval ipaddress="10.12.1213.1234,10.12.1243.124,10.13.1213.1234,10.14.1213.1234,10.15.1213.1234" | table ipaddress | makemv ipaddress delim=","  | mvexpand ipaddress</query>
          <earliest></earliest>
          <latest></latest>
        </search>
        <drilldown>          
    <link>
       http://www.tcpiputils.com/browse/ip-address/$click.value$
    </link>
  </drilldown>
      </table>
    </panel>
  </row>
</dashboard>

[jluo_splunk]

Yes! You'll have to put together a workflow action. Documentation here.