Dashboards & Visualizations

How to implement custom POST actions on a dashboard drill down?

alonsocaio
Contributor

Hi,

I'm implementing some automations from Splunk to other tools, and I would like to create a drill down on one of my Splunk dashboards. I want it to perform a POST request to a custom API endpoint, sending the values of the clicked row as parameters.

Has anyone ever implemented custom POST actions on a dashboard drill down? Is is possible?

It would be something similar to the Workflow Actions, but I still didn't find a way to do this from a dashboard panel.

Thanks!

Labels (1)
0 Karma
1 Solution

alonsocaio
Contributor

I have solved the automation needs using a GET action on the drilldown, pointing to a custom API endpoint that searches Splunk using its REST API. This way I can get the expected content that would be sent into the POST request body.

View solution in original post

0 Karma

alonsocaio
Contributor

I have solved the automation needs using a GET action on the drilldown, pointing to a custom API endpoint that searches Splunk using its REST API. This way I can get the expected content that would be sent into the POST request body.

0 Karma

niketn
Legend

@alonsocaio you can use Simple XML JS Extension for POST. Refer to KV Store implementation (you may not need to convert dashboard to HTML, this can be done through Simple XML JS extension directly). https://dev.splunk.com/enterprise/tutorials/tutorialusekv/addarecord

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...