Dashboards & Visualizations

ip address link to external url

ulikabbq
Path Finder

I want to be able to click an ip addres in a dashboard panel and it link to http://www.tcpiputils.com/browse/ip-address/<ipaddress> where is passes the ip address and adds it to the end of the url.

Is this possible?

0 Karma

somesoni2
Revered Legend

Here you go

<dashboard>
  <label>DrilldownFromTable</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval ipaddress="10.12.1213.1234,10.12.1243.124,10.13.1213.1234,10.14.1213.1234,10.15.1213.1234" | table ipaddress | makemv ipaddress delim=","  | mvexpand ipaddress</query>
          <earliest></earliest>
          <latest></latest>
        </search>
        <drilldown>          
    <link>
       http://www.tcpiputils.com/browse/ip-address/$click.value$
    </link>
  </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma

jluo_splunk
Splunk Employee
Splunk Employee

Yes! You'll have to put together a workflow action. Documentation here.

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...