Have a single line that when selected launch searc...

mark_ · ‎10-08-2021

Coming from older version of Splunk. We have basically html links that when selected opened a new tab with a presaved search. We have about 30 searches on a single page which all are unique and all open a new tab to display. How is this done with the newest version of Splunk? The only thing I can find has is a panel that launches a saved search in a new tab but it also shows in on the dashboard which is what I don't want because I need to have 29 other items that can be selected.

richgalloway · ‎10-08-2021

Please tell us more about the problem you are trying to solve. What older version of Splunk are you using? Where are these HTML links found? Are they in a Splunk dashboard, outside Splunk, or somewhere else? Is that single page with 30 searches a Splunk dashboard? If so, does it use Simple XML, Advanced XML, or HTML?

---
If this reply helps you, Karma would be appreciated.

mark_ · ‎10-08-2021

So in looking responding to your questions I think what I am really asking for is how to a list 30 HTML links on Splunk Dashboard page?

richgalloway · ‎10-08-2021

As you probably know by know, there is no path from Advanced XML to anything current other than to re-write the dashboard.

Ask 100 people how to put 30 HTML links in a dashboard and you'll probably get 100 different answers. Here's one of them.

Go the Search & Reporting app and click on Dashboards. Click the Create New Dashboard button. Give the dashboard a name, click Classic, then click Create.

Click the Edit button in the top-right corner of the dashboard.

Click the Source button. Replace the contents with this:

<dashboard version="1.1">
  <label>Name of the dashboard</label>
  <row>
    <panel>
      <html>
        <p><a class="external" href="<link URL>" target="_blank">Link text</a>.</p>
      </html>
    </panel>
  </row>
</dashboard>

Repeat the <row> and/or <panel> elements as desired to create the links. Update the content of the panels, of course.

---
If this reply helps you, Karma would be appreciated.

mark_ · ‎10-08-2021

Splunk Version 5 is where it all started. Was able to import into Version 6 but unable to import into 8. No longer supported. Advanced XML.

The links were all web links on a Splunk Dashboard.

Have a single line that when selected launch search in seperate tab

Dashboard Studio

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

They're back! Join the SplunkTrust and MVP at .conf24

Enterprise Security Content Update (ESCU) | New Releases