Dashboards & Visualizations

Adding a Workflow Action to a Dashboard

jordanperks
Path Finder

I have been searching all afternoon for the answer to this question and cannot seem to find anything. I have a table within a dashboard that shows the source IP, virus name and sha hash. I want a workflow action to be present within the table so when the hash is clicked it searches for it in VirusTotal. The workflow action is working properly when looking at individual events that are not in a table, but I cannot figure out how to apply it to a table in a dashboard. Is this doable?

sbrant_splunk
Splunk Employee
Splunk Employee

It's doable but not as a "workflow" action. I think a custom drilldown will work for you here.

http://docs.splunk.com/Documentation/Splunk/6.0/AdvancedDev/TableChartDrilldown

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...