Dashboards & Visualizations

ip address link to external url

ulikabbq
Path Finder

I want to be able to click an ip addres in a dashboard panel and it link to http://www.tcpiputils.com/browse/ip-address/<ipaddress> where is passes the ip address and adds it to the end of the url.

Is this possible?

0 Karma

somesoni2
Revered Legend

Here you go

<dashboard>
  <label>DrilldownFromTable</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval ipaddress="10.12.1213.1234,10.12.1243.124,10.13.1213.1234,10.14.1213.1234,10.15.1213.1234" | table ipaddress | makemv ipaddress delim=","  | mvexpand ipaddress</query>
          <earliest></earliest>
          <latest></latest>
        </search>
        <drilldown>          
    <link>
       http://www.tcpiputils.com/browse/ip-address/$click.value$
    </link>
  </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma

jluo_splunk
Splunk Employee
Splunk Employee

Yes! You'll have to put together a workflow action. Documentation here.

0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...