Dashboards & Visualizations

How to make a column value clickable?

av_
Path Finder

I have created a Splunk dashboard in which a panel consists of a table. The table has multiple columns wherein one column values consists of URL. The URL is clickable. I have used the following piece of code to make it clickable.

<drilldown>
<condition field="abc">
<link target="_blank">$row.abc|n$</link>
</condition>
<condition field="*"></condition>
</drilldown>

Now, the problem is that the entire row is highlighted in blue and when I hover the mouse over any column, it gives an impression that the field value is clickable when it is not. 

I want all the column values to stay in black and unselected. Only the URL values shall remain highlighted.

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

Try something like this

    <panel depends="$stayhidden$">
      <html>
        <style>
          #panel1006 table tbody td[data-cell-index="0"],
          #panel1006 table tbody td[data-cell-index="1"]{
            color: black !important;
          }
        </style>
      </html>
    </panel>
<panel id="panel1006">
<input id="showCollapseLink5" type="link" token="tokLinkCollapse5" searchWhenChanged="true" depends="$showCollapseLink5$">
<label></label>
<choice value="collapse">-</choice>
<change>
<condition value="collapse">
<set token="showExpandLink5">true</set>
<unset token="form.tokLinkCollapse5"></unset>
</condition>
</change>
</input><input id="linkExpand5" type="link" token="tokLinkExpand5" searchWhenChanged="true" depends="$showExpandLink5$">
        <label></label>
        <choice value="expand">+</choice>
        <change>
          <condition value="expand">
            <set token="showCollapseLink5">true</set>
            <unset token="showExpandLink5"></unset>
            <unset token="form.tokLinkExpand5"></unset>
          </condition>
        </change>
      </input>
      <table rejects="$showExpandLink5$">
        <title>Show field values</title>
        <search>
          <query>index=main sourcetype=abc |table name host link</query>
          <earliest>$fieldEarliestTime$</earliest>
          <latest>$fieldLatestsTime$</latest>
        </search>
        <option name="count">5</option>
        <option name="drilldown">cell</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <condition field=" link">
            <link target="_blank">$link|n$</link>
          </condition>
           <condition field="*"></condition>
        </drilldown>
      </table>
    </panel>

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust

Use a hidden panel with some CSS - you need to give your table an id e.g. tableClickableURL - you also need to repeat for all columns other than the URL column.

    <panel depends="$stayhidden$">
      <html>
        <style>
          #tableClickableURL table tbody td[data-cell-index="0"]{
            color: black !important;
          }
        </style>
      </html>
    </panel>
0 Karma

av_
Path Finder

@ITWhisperer , Thanks you for the solution. I tried it but it is not working for me.

I am sharing a piece of my source code. Please let me know how can I incorporate your solution in my code.

<panel id="panel1006">
<input id="showCollapseLink5" type="link" token="tokLinkCollapse5" searchWhenChanged="true" depends="$showCollapseLink5$">
<label></label>
<choice value="collapse">-</choice>
<change>
<condition value="collapse">
<set token="showExpandLink5">true</set>
<unset token="form.tokLinkCollapse5"></unset>
</condition>
</change>
</input><input id="linkExpand5" type="link" token="tokLinkExpand5" searchWhenChanged="true" depends="$showExpandLink5$">

        <label></label>

        <choice value="expand">+</choice>

        <change>

          <condition value="expand">

            <set token="showCollapseLink5">true</set>

            <unset token="showExpandLink5"></unset>

            <unset token="form.tokLinkExpand5"></unset>

          </condition>

        </change>

      </input>

      <table rejects="$showExpandLink5$">

        <title>Show field values</title>

        <search>

          <query>index=main sourcetype=abc |table name host link</query>

          <earliest>$fieldEarliestTime$</earliest>

          <latest>$fieldLatestsTime$</latest>

        </search>

        <option name="count">5</option>

        <option name="drilldown">cell</option>

        <option name="refresh.display">progressbar</option>

        <drilldown>

          <condition field=" link">

            <link target="_blank">$link|n$</link>

          </condition>

           <condition field="*"></condition>

        </drilldown>

      </table>

    </panel>

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try something like this

    <panel depends="$stayhidden$">
      <html>
        <style>
          #panel1006 table tbody td[data-cell-index="0"],
          #panel1006 table tbody td[data-cell-index="1"]{
            color: black !important;
          }
        </style>
      </html>
    </panel>
<panel id="panel1006">
<input id="showCollapseLink5" type="link" token="tokLinkCollapse5" searchWhenChanged="true" depends="$showCollapseLink5$">
<label></label>
<choice value="collapse">-</choice>
<change>
<condition value="collapse">
<set token="showExpandLink5">true</set>
<unset token="form.tokLinkCollapse5"></unset>
</condition>
</change>
</input><input id="linkExpand5" type="link" token="tokLinkExpand5" searchWhenChanged="true" depends="$showExpandLink5$">
        <label></label>
        <choice value="expand">+</choice>
        <change>
          <condition value="expand">
            <set token="showCollapseLink5">true</set>
            <unset token="showExpandLink5"></unset>
            <unset token="form.tokLinkExpand5"></unset>
          </condition>
        </change>
      </input>
      <table rejects="$showExpandLink5$">
        <title>Show field values</title>
        <search>
          <query>index=main sourcetype=abc |table name host link</query>
          <earliest>$fieldEarliestTime$</earliest>
          <latest>$fieldLatestsTime$</latest>
        </search>
        <option name="count">5</option>
        <option name="drilldown">cell</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <condition field=" link">
            <link target="_blank">$link|n$</link>
          </condition>
           <condition field="*"></condition>
        </drilldown>
      </table>
    </panel>

av_
Path Finder

@ITWhisperer This worked. Thanks!

0 Karma
Get Updates on the Splunk Community!

Exciting News: The AppDynamics Community Joins Splunk!

Hello Splunkers,   I’d like to introduce myself—I’m Ryan, the former AppDynamics Community Manager, and I’m ...

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...