Dashboards & Visualizations

3rd party launching splunk saved search with parameters?

pmeyerson
Path Finder

Hi - I have a button click action in a 3rd party system to launch a new browser window to my splunk instance. I can tweak the search. If I created a tokenized dashboard, is it possible to drive the tokens from the URL into the dashboard somehow?

To clarify, I am not trying to pull the dash results into the 3rd party app - the app is launching a window and I am seeing the dashboard in splunk directly, with details provided by the third party.

Thanks for any pointers!

0 Karma
1 Solution

amcjohn
Engager

If you can dynamically populate the link the user clicks on in the third party tool then yes, you can pre-populate your dashboard by making your link look like the code below.

[URL]?form.[target_token_name]=[$source_value$]

[URL] = the URL of your Splunk dashboard
[target_token_name] = the name of your Splunk dashboard token
[$source_value$] = the value populated from the third party tool.

Pulled from Splunk documentation here: http://docs.splunk.com/Documentation/Splunk/7.0.3/Viz/DrilldownLinkToDashboard

View solution in original post

0 Karma

amcjohn
Engager

If you can dynamically populate the link the user clicks on in the third party tool then yes, you can pre-populate your dashboard by making your link look like the code below.

[URL]?form.[target_token_name]=[$source_value$]

[URL] = the URL of your Splunk dashboard
[target_token_name] = the name of your Splunk dashboard token
[$source_value$] = the value populated from the third party tool.

Pulled from Splunk documentation here: http://docs.splunk.com/Documentation/Splunk/7.0.3/Viz/DrilldownLinkToDashboard

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...