How to insert a static column in a table with drilldown to a custom link?

[vikas_gopal]

Hi Experts ,

I have a very basic requirement . I want to display only one table and it should have one static column value lets say "Link" which I want to further drill down to my custom link.
I am so irritated that I am not even know that How I can add a static column .

Please suggest

[vikas_gopal]

I found the solution I used eval for example

index=_internal |table Incident, host | eval Incident="123" | dedup host

with this a new column incident has been added to the table with the static value 123.

[sowings]

You've already found that using eval can provide you with a static value for a field.

Next, you'll want to couple this with the simple XML drilldown specification in your dashboard. The new field that you've created (here, you've called it Incident) would then be provided to a drilldown value. The syntax for the drilldown of the table might look like this:

  <table>
    ...
    <drilldown>
      <link>/app/<yourapp>/<yourview>/?query\_param=$row.Incident$<link>
   </drilldown>
  </table>

The "row.Incident" is the value of the Incident field within the row that was clicked. If your target is a Splunk form, the "query_param" part might be "form.Incident", depending upon the name of the field in the target view (while always having "form." as a prefix to call it out as a field for the form).