How do I set in a dashboard a link to a saved sear...

skender27 · ‎04-28-2017

Hi splunkers,

I have a dashboard in Splunk with panels in html format, like this:

<panel>
      <html>
      <body>
...
<a href=...
...

How can I set a link inside this dashboard in order to point to an existing search which contains double quotes, like this:

index=myindex sourcetype="Search_Name_(with_quotes)"

I tried this:

<a href="@go?s=index=myindex sourcetype=Search_Name_(with_quotes)"

but it not working...
It is like I have to know the escape character of the duble quotes or a the URL encoing of such character.

Any suggestions?

Thanks a lot,
Skender

jaxjohnny2000 · ‎04-06-2020

Try this: note: %20 is HTML for a space

  <title>Editor Panel</title>
  <html>
    <style>.btn-primary { margin: 5px 10px 5px 0; }</style>
  <font size="4">
  <table>
      <tr>    
          <td>
            <a class="btn btn-primary" href="https://SPLUNK-SERVER-DNS.com/en-US/app/DESTINATION-APP/report?s=Report%20-%20NAME%20HERE" target="_blank">Descriptive Text here AKA Report Name Here</a>
         </td>
     </tr>
 </table>
 </font>    

</panel>

gcusello · ‎04-28-2017

Hi skender27,
did you tried with backslash (\) before doublequotes?
Evert way I suggest to avoid spaces in knowledge object.
Bye.
Giuseppe

skender27 · ‎04-28-2017

Hi Giuseppe,

You mean like this:

<a href="@go?s=index=myindex sourcetype=\"Search_Name_(with_quotes)\""

Skender

gcusello · ‎04-28-2017

Hi skender27,
Yes, it should run...

Bye.
Giuseppe

How do I set in a dashboard a link to a saved search which contains double quotes?

Enterprise Security Content Update (ESCU) | New Releases

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

Improve Data Pipelines Using Splunk Data Management