Dashboards & Visualizations

How to add hyperlink to column value in Splunk dashboard?

d867748
Engager

Hi,
Can someone please advise how to add a hyperlink to the column fields in a table?

E.g.
How can I make NewField value a hyperlink to Field1 values (e.g. ID01 and ID02 ) in the table below instead of separate field?

Table:
Field1 NewField
ID01 http://company.test.com/page-ID01
ID02 http://company.test.com/page-ID02`

<panel>
      <title>Report Title</title>
      <table>
        <search>
          <query>index=xxx
          | fields Field1, Field2, ...
          | eval NewField = "hyperlinkhttp://company.test.com/page-".Field1
          | table Field1, NewField]   
           <earliest>$datefield.earliest$</earliest>
          <latest>$datefield.latest$</latest>
          <sampleRatio>1</sampleRatio>
        </search>
      </table>
    </panel>
</row>`

d867748
Engager

Many thanks @martin_mueller and @niketnilay for your responses, will try out the suggestions.

0 Karma

@d867748, Another alternative would be to use SimpleXML table configuration <fields> to hide NewField from the table (list only the fields that should be displayed) and still use the same for drilldown using $row.NewField$. You should check out Splunk Dashboard Examples app from Splunkbase for various drilldown examples including this one.

  <row>
     <panel>
       <title>Report Title</title>
       <table>
         <search>
           <query>| makeresults
           | eval Field1="ID01"
           | eval NewField = "http://www.company.test.com/page-".Field1
           | table Field1, NewField</query>
            <earliest>-1s</earliest>
           <latest>now</latest>
           <sampleRatio>1</sampleRatio>
         </search>
         <fields>["Field1"]</fields>
         <drilldown>
           <link target="_blank">$row.NewField|n$</link>
         </drilldown>
       </table>
     </panel>
  </row>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Store your URL in a field starting with an underscore, e.g. _url, use a drilldown on column Field1 and <link> to $row._url$.

See https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/PanelreferenceforSimplifiedXML#drilldown for docs on drilldowns, conditional drilldowns working only on specific columns are right below that.

Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...