Dashboards & Visualizations

"Link to Search" interaction missing in Dashboard Studio

franklinnavarro
Engager

Looking to create a dashboard in Dashboard Studio that drills down on an Event Messages column in in a table.  According to this blog post,  a "Link to search" option was added a few months ago, but I don't see the option in my editor in Splunk 9.1.2:

Screenshot 2024-01-18 at 2.22.06 PM.png  

 

 

 

 

 

 

 

 

 

 

 

I've also tried adding the JSON directly:

 

 

"eventHandlers": [
               {
                   "type": "drilldown.linkToSearch",
                   "options": {
                       "type": "auto",
                       "newTab": true
                   }
               }
           ]

 

 and that didn't work either.

 

Any help is appreciated.

 

Labels (3)
0 Karma
1 Solution

acharlieh
Influencer

That blog post is announcing a feature being released in Cloud version 9.0.2305.

Cloud release numbers and Enterprise release numbers aren't really directly comparable. (Features tend to cloud first and then get released in later Enterprise releases). 

That said if you go to the doc for the What's New in Dashboard Studio on Enterprise 9.1.2: https://docs.splunk.com/Documentation/Splunk/9.1.2/DashStudio/WhatNew 

You'll notice that the table looks very similar to the table underneath the header of "What's new in Splunk Cloud 9.0.2303" (the previous cloud release) from the link from the blog post: https://docs.splunk.com/Documentation/SplunkCloud/9.0.2305/DashStudio/WhatNewSC 

So from that I'd suspect the feature that you're looking for that came out in a later version of cloud would likely come out in a later version of Enterprise... Hopefully 9.2.x but of course could always be later.

View solution in original post

0 Karma

acharlieh
Influencer

That blog post is announcing a feature being released in Cloud version 9.0.2305.

Cloud release numbers and Enterprise release numbers aren't really directly comparable. (Features tend to cloud first and then get released in later Enterprise releases). 

That said if you go to the doc for the What's New in Dashboard Studio on Enterprise 9.1.2: https://docs.splunk.com/Documentation/Splunk/9.1.2/DashStudio/WhatNew 

You'll notice that the table looks very similar to the table underneath the header of "What's new in Splunk Cloud 9.0.2303" (the previous cloud release) from the link from the blog post: https://docs.splunk.com/Documentation/SplunkCloud/9.0.2305/DashStudio/WhatNewSC 

So from that I'd suspect the feature that you're looking for that came out in a later version of cloud would likely come out in a later version of Enterprise... Hopefully 9.2.x but of course could always be later.

0 Karma

franklinnavarro
Engager

Good to know about the different versions, thanks for the help!

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Yes @franklinnavarro .. I have verified that the "Link to Search" is not available. 

as i remember this was available in classic dashboard. 

i think they mistakenly added the same content from classic dashboard to that blog for the Dashboard Studio. thanks. 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...