Dashboards & Visualizations

How to implement custom POST actions on a dashboard drill down?

alonsocaio
Contributor

Hi,

I'm implementing some automations from Splunk to other tools, and I would like to create a drill down on one of my Splunk dashboards. I want it to perform a POST request to a custom API endpoint, sending the values of the clicked row as parameters.

Has anyone ever implemented custom POST actions on a dashboard drill down? Is is possible?

It would be something similar to the Workflow Actions, but I still didn't find a way to do this from a dashboard panel.

Thanks!

Labels (1)
0 Karma
1 Solution

alonsocaio
Contributor

I have solved the automation needs using a GET action on the drilldown, pointing to a custom API endpoint that searches Splunk using its REST API. This way I can get the expected content that would be sent into the POST request body.

View solution in original post

0 Karma

alonsocaio
Contributor

I have solved the automation needs using a GET action on the drilldown, pointing to a custom API endpoint that searches Splunk using its REST API. This way I can get the expected content that would be sent into the POST request body.

0 Karma

niketn
Legend

@alonsocaio you can use Simple XML JS Extension for POST. Refer to KV Store implementation (you may not need to convert dashboard to HTML, this can be done through Simple XML JS extension directly). https://dev.splunk.com/enterprise/tutorials/tutorialusekv/addarecord

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...