Knowledge Management

With token values obtained from 1st dashboard on this Splunk instance, open 2nd dashboard on another Splunk instance that displays related to the token values

sssignals
Path Finder

Hi Splunk community

Is it possible to click on a row in a table, set tokens to the clicked values on a dashboard belonging to 1st splunk instance say IP address 1.2.3.4 and enable drilldown to a custom URL to another separate Splunk instance with IP address 5.6.7.8 and display panels related to the token values?

I have searched the web and my conclusion is that it cannot be done. It can only open up a dashboard on 5.6.7.8 without customizing to the token values.

Appreciate your advice on this. Many thanks in advance.

Tags (1)
0 Karma

woodcock
Esteemed Legend

What do you mean by instance? Do you mean panel or dashboard or ... ???

0 Karma

xpac
SplunkTrust
SplunkTrust

I think he means one search head and another search head...

0 Karma

xpac
SplunkTrust
SplunkTrust

Hey, did you try this?
https://answers.splunk.com/answers/457956/how-to-drill-down-from-a-splunk-dashboard-to-an-ex.html

Also note the second answer about not encoding special characters 😉

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...