Have a single line that when selected launch searc...

mark_ · ‎10-08-2021

Coming from older version of Splunk. We have basically html links that when selected opened a new tab with a presaved search. We have about 30 searches on a single page which all are unique and all open a new tab to display. How is this done with the newest version of Splunk? The only thing I can find has is a panel that launches a saved search in a new tab but it also shows in on the dashboard which is what I don't want because I need to have 29 other items that can be selected.

richgalloway · ‎10-08-2021

Please tell us more about the problem you are trying to solve. What older version of Splunk are you using? Where are these HTML links found? Are they in a Splunk dashboard, outside Splunk, or somewhere else? Is that single page with 30 searches a Splunk dashboard? If so, does it use Simple XML, Advanced XML, or HTML?

---
If this reply helps you, Karma would be appreciated.

mark_ · ‎10-08-2021

So in looking responding to your questions I think what I am really asking for is how to a list 30 HTML links on Splunk Dashboard page?

richgalloway · ‎10-08-2021

As you probably know by know, there is no path from Advanced XML to anything current other than to re-write the dashboard.

Ask 100 people how to put 30 HTML links in a dashboard and you'll probably get 100 different answers. Here's one of them.

Go the Search & Reporting app and click on Dashboards. Click the Create New Dashboard button. Give the dashboard a name, click Classic, then click Create.

Click the Edit button in the top-right corner of the dashboard.

Click the Source button. Replace the contents with this:

<dashboard version="1.1">
  <label>Name of the dashboard</label>
  <row>
    <panel>
      <html>
        <p><a class="external" href="<link URL>" target="_blank">Link text</a>.</p>
      </html>
    </panel>
  </row>
</dashboard>

Repeat the <row> and/or <panel> elements as desired to create the links. Update the content of the panels, of course.

---
If this reply helps you, Karma would be appreciated.

mark_ · ‎10-08-2021

Splunk Version 5 is where it all started. Was able to import into Version 6 but unable to import into 8. No longer supported. Advanced XML.

The links were all web links on a Splunk Dashboard.

Have a single line that when selected launch search in seperate tab

Dashboard Studio

Can’t make it to .conf25? Join us online!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

Calling All Security Pros: Ready to Race Through Boston?

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Are you a member of the Splunk Community?