Dashboards & Visualizations

ip address link to external url

ulikabbq
Path Finder

I want to be able to click an ip addres in a dashboard panel and it link to http://www.tcpiputils.com/browse/ip-address/<ipaddress> where is passes the ip address and adds it to the end of the url.

Is this possible?

0 Karma

somesoni2
Revered Legend

Here you go

<dashboard>
  <label>DrilldownFromTable</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval ipaddress="10.12.1213.1234,10.12.1243.124,10.13.1213.1234,10.14.1213.1234,10.15.1213.1234" | table ipaddress | makemv ipaddress delim=","  | mvexpand ipaddress</query>
          <earliest></earliest>
          <latest></latest>
        </search>
        <drilldown>          
    <link>
       http://www.tcpiputils.com/browse/ip-address/$click.value$
    </link>
  </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma

jluo_splunk
Splunk Employee
Splunk Employee

Yes! You'll have to put together a workflow action. Documentation here.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...