Hello Splunkers,
I need help about a drilldown. I have a pannel with one table and 8 columns, for example:
User | src | dst | dst_port | file | virus | url | ref
My column ref is a URL site, for example:
http://www.fortinet.com/ve?vid=6067315
http://www.fortinet.com/ve?vid=6067313
http://www.fortinet.com/ve?vid=6067315
My idea is when my costumer click on ref values, redirects to the ref website directly .
How do I to redirect for website?
Tks.
Hi axl88,
I don't follow you, because the question is: click on ref values, so redirects to the ref website directly, like www.fortigate.com. (How do I to redirect for website? )
I did a workaround using xml tag drilldown .
so, look at my xml configuration:
|
Malware Analysis
index=firewall sourcetype=fortigate "subtype=infected" pri=warning host="abc.abc.abc.abc" | rex field=ref "http://www.fortinet.com/(?<ref_id>.*)" | table user, src, dst, dst_port, file, virus, url, ref_id | rename user as "Username" src as "IP Source ", dst as "IP Destination ", dst_port as "Port Destination" " <earliestTime>-24h@h</earliestTime> <latestTime>now</latestTime> <drilldown> <link>http://www.fortinet.com/$row.ref_id$</link> </drilldown> <option name="wrap">true</option> <option name="rowNumbers">false</option> <option name="dataOverlayMode">none</option> <option name="drilldown">cell</option> <option name="count">10</option> </table>
I hope to help all.
cheers!
Hello Axl88...
no problems. Thank you for your help 🙂
Cheers!
Hey dfigurello,
you could follow my solution as well. I assumed that you are creating dashboard or application that you want dynamic and direct configuration. which would allow you to make your updates anytime regarding to MVC architecture. I m sorry for inconvenience.
Good luck with your search each time. 🙂
Getting the link value: You can handle it with javascript easily.
Check Splunk 6 Dashboard Examples -> Drilldown with PermaLinking (or something like that)
when you examine Javascript of Dashboard,
masterView.on('click', function(e){
, it is your event listener that you can get the value like in example:
var Temp = e.data['row.sourcetype'];
this function is really generic that you can use it pretty much for everything on your dashboard. (Ex: "on.('click:chart', function(e){" with e.name2
after that it is a matter of just java script:
function OpenInNewTab(url){
var win=window.open(url, '_blank');
win.focus();
}
For further knowledge, you can consult dev.splunk.
Did you find the solution?
I'm very interested by this.