Hi,
Can someone please advise how to add a hyperlink to the column fields in a table?
E.g.
How can I make NewField value a hyperlink to Field1 values (e.g. ID01 and ID02 ) in the table below instead of separate field?
Table:
Field1 NewField
ID01 http://company.test.com/page-ID01
ID02 http://company.test.com/page-ID02`
<panel>
<title>Report Title</title>
<table>
<search>
<query>index=xxx
| fields Field1, Field2, ...
| eval NewField = "hyperlinkhttp://company.test.com/page-".Field1
| table Field1, NewField]
<earliest>$datefield.earliest$</earliest>
<latest>$datefield.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
</table>
</panel>
</row>`
Many thanks @martin_mueller and @niketnilay for your responses, will try out the suggestions.
@d867748, Another alternative would be to use SimpleXML table configuration <fields>
to hide NewField
from the table (list only the fields that should be displayed) and still use the same for drilldown using $row.NewField$
. You should check out Splunk Dashboard Examples app from Splunkbase for various drilldown examples including this one.
<row>
<panel>
<title>Report Title</title>
<table>
<search>
<query>| makeresults
| eval Field1="ID01"
| eval NewField = "http://www.company.test.com/page-".Field1
| table Field1, NewField</query>
<earliest>-1s</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<fields>["Field1"]</fields>
<drilldown>
<link target="_blank">$row.NewField|n$</link>
</drilldown>
</table>
</panel>
</row>
Store your URL in a field starting with an underscore, e.g. _url
, use a drilldown on column Field1
and <link>
to $row._url$
.
See https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/PanelreferenceforSimplifiedXML#drilldown for docs on drilldowns, conditional drilldowns working only on specific columns are right below that.