HI
Can someone please let me know how to open different web URLs by clicking on different rows of a dashboard using drilldown option:
Example :
Dashboard is using vlookup file File.csv with below 2 columns:
DESC1 , LINK1
DESC2 , LINK2
DESC3 , LINK3
I've used the below code , but it is taking me always to the same link even when i click on DESC1 or DESC2 or DESC3.
<row>
<panel>
<table>
<search>
<query>| inputlookup File.csv | fields * </query>
<earliest>1722776400.000</earliest>
<latest>1722865326.000</latest>
<sampleRatio>1</sampleRatio>
<done>
<set token="schedule">$result.Schedule$</set>
</done>
</search>
<drilldown>
<link target="_blank">https://community.splunk.com/</link>
</drilldown>
</table>
</panel>
</row>
Is it possible , then if i click
DESC1 , it will take me to the link "https://community.splunk.com/t5/Dashboards-Visualizations"
DESC2 , it will take me to the link "https://www.google.com/"
DESC3 , it will take me to the link "https://blog.avotrix.com/embed-splunk-dashboard-into-external-website/?force_isolation=true"
Simple answer, yes, it is possible
Here is one way to do it
<dashboard version="1.1" theme="light">
<label>URL Drilldown</label>
<row>
<panel>
<table>
<search>
<query>| makeresults
| fields - _time
| eval url=split("DESC1,https://community.splunk.com/t5/Dashboards-Visualizations|DESC2,https://www.google.com/|DESC3,https://slack.com/intl/en-gb/blog/collaboration/new-splunk-app-for-slack","|")
| mvexpand url
| eval Description=mvindex(split(url,","),0)
| eval url=mvindex(split(url,","),1)</query>
<earliest>-24h@h</earliest>
<latest>now</latest>
</search>
<option name="drilldown">cell</option>
<option name="refresh.display">progressbar</option>
<drilldown>
<condition field="Description">
<link target="_blank">$row.url|n$</link>
</condition>
<condition></condition>
</drilldown>
</table>
</panel>
</row>
</dashboard>