Dashboards & Visualizations

how to create custom drilldown/hyperlink for columns values in a table

rijinc
Explorer

Hi
I am not sure if this is possible in Splunk.

I have a field values with Hyperlinks in a table. ex:

Name | Age | Webpage
Rijin 31 https;//www/rijin.app.com/31/how.html
Rijin1 32 https;//www/rijin1.app.com/32/hello.html

I want to get rid of this hyperlink from the table as the user should be able to click on the table and redirect to the Webpage links in
each rows
For ex: if add eval Webpage as Link and

Name | Age | Webpage
Rijin 31 Link
Rijin1 32 Link

I don't know how its possible to drilldown the column Webpage where i click on the Link and it should redirect to the Webpage for Rijin, Rijin1 and so on

0 Karma

woodcock
Esteemed Legend

I think that you are asking if you can obscure the actual link and replace it with a name/label but still allow the drilldown action to go to the URL (which is no longer displayed). You can do this, but it will take some work.
First, you need a lookup file which contains the name and URL pairs (you can create this on the fly from a search using ... | outputlookup let's call this links.csv.
Now you have a table of events with 3 fields: Name, Age, and Webpage.
Add to the bottom of your search this SPL:

... | rename Webpage AS _Webpage | lookup links.csv URL AS _Webpage OUTPUT URL AS Webpage

You have hidden the field with the URL so the user will not see it but when the user clicks on a row, you can get the URL from the $click._Webpage$ token.

0 Karma

rijinc
Explorer

Thanks for the reply

I think that you are asking if you can obscure the actual link and replace it with a name/label but still allow the drilldown action to go to the URL (which is no longer displayed). - Yes correct

Problem here is links are not static it changes everyday hence updating lookup file everyday, currently it's 18000k records and keeps on changing and increasing.

0 Karma

woodcock
Esteemed Legend

The invisible link part of my answer is what you need but the map from URL to name needs some kind of solution too. I suggested a lookup but you might do something else (maybe the events have both the URL and the name).

0 Karma

rijinc
Explorer

thanks its worked.
one challenge if i give cell /row drilldown the whole row is highlighted is there a way to just highlight the URl column ( ex here is the Webpage)

Is it possible in splunk or javascript etc?

0 Karma

woodcock
Esteemed Legend

That is a different question entirely so you should click Accept to close this question and ask a new one.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...