Dashboards & Visualizations

How to edit my Simple XML to contain an absolute url in drilldowns?


I have done some searching and have not been successful in getting this to work. Most of the examples assume you will be providing the base url and appending the value. In this case, I have a column that contains an absolute URL (https://...) and have added the following to my simple XML, but when I click on it, it prepends the Splunk URL

      <condition field="Host Details">
        <link target="_blank">

I have also tried using [https://$click.value2$] but then it prepends https:// so I get https://https://...

I am sure it is something small that I am missing. Any help is greatly appreciated.

0 Karma

Splunk Employee
Splunk Employee

Hi @vectra_tme,
We have a "no encoding" token filter that you might try with the token you are using to represent the absolute URL.

For example:



Hope this helps! Let me know if not.

0 Karma


I don't think there is a native method to so (redirect to absolute URL available in field value). There are some workarounds (see the first and last answer) here. Other option is to remove https:// in the field value, so that wen the link module appends its https://, its a valid URL.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...