Dashboards & Visualizations

How to open an extracted URI field through drilldown option ?

zacksoft
Contributor

In my dashboard, I have a tabular representation of a panel that shows some extracted value of the events in columns such as _time, address.
Example :
_time Address
03:34 https://www.rediff.com
03:45 https://www.rediff.com
03:47 https://www.yahoo.com

I enabled the drilldown option in the XLM editor so that when I click on row 1 it should redirect and open www.rediff.com etc..

I did this, but it won't work

<drilldown>
          <link>$row.address$</link>
   </drilldown>
Labels (2)
Tags (1)
0 Karma
1 Solution

Sfry1981
Communicator

try using this in the drilldown instead

<drilldown>
  <link target="_blank">$click.value2|n$</link>
</drilldown>

View solution in original post

0 Karma

Sfry1981
Communicator

try using this in the drilldown instead

<drilldown>
  <link target="_blank">$click.value2|n$</link>
</drilldown>
0 Karma

zacksoft
Contributor

Thank you. it helped.
I actually have more than 2 columns ... and Is it possible to configure so that if I click on that row (on any cell I choose), it would redirect me to the Address value ?
Currently I have to click on "Address" column's cell to be able to re-direct to the page.

0 Karma

Sfry1981
Communicator

@zacksoft

All you would need to do is go into the source data and in the xml where it shows the below:

<option name="drilldown">cell</option>

change to

<option name="drilldown">row</option>

that will make the whole row clickable instead of just a cell

0 Karma
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...

Enterprise Security Content Update (ESCU) | New Releases

In March, the Splunk Threat Research Team had 2 releases of security content via the Enterprise Security ...