Hi Splunk community
Is it possible to click on a row in a table, set tokens to the clicked values on a dashboard belonging to 1st splunk instance say IP address 1.2.3.4 and enable drilldown to a custom URL to another separate Splunk instance with IP address 5.6.7.8 and display panels related to the token values?
I have searched the web and my conclusion is that it cannot be done. It can only open up a dashboard on 5.6.7.8 without customizing to the token values.
Appreciate your advice on this. Many thanks in advance.
What do you mean by instance? Do you mean panel or dashboard or ... ???
I think he means one search head and another search head...
Hey, did you try this?
https://answers.splunk.com/answers/457956/how-to-drill-down-from-a-splunk-dashboard-to-an-ex.html
Also note the second answer about not encoding special characters 😉