Splunk Enterprise

Splunk 6 web interface - not possible to open events in new window from statistics pane

bochmann
Path Finder

In earlier versions of Splunk, it was possible to CTRL-click on statistics results, and have a search with the appropriate field opened in a new browser window.

In Splunk 6, the new search is always opened in the same window, and I have to rely on the browser back button to go back to the statistics view. That's a major hassle when trying to quickly go through event details from statistics - especially as going back will always end up on the first page of the statistics, not the one you were coming from.

Simple example: I have a search in the line of host=server | top limit=100 id.
When I click on one of the results in the id row of the statistics page, Splunk 6 will start a new search with host=server id=result in the same browser window, losing the statistics overview.

Is there any way to get the old behaviour back?

Tags (3)
1 Solution

mattness
Splunk Employee
Splunk Employee

Unfortunately the ability to use special command keys to open a stats chart drilldown search in a new window is not supported in Splunk Enterprise 6.0. Your request has been noted by the engineering team and they are considering the possibility of restoring this functionality in a future release.

View solution in original post

mattness
Splunk Employee
Splunk Employee

Unfortunately the ability to use special command keys to open a stats chart drilldown search in a new window is not supported in Splunk Enterprise 6.0. Your request has been noted by the engineering team and they are considering the possibility of restoring this functionality in a future release.

mattness
Splunk Employee
Splunk Employee

I'll try to keep this ball rolling. 🙂

bochmann
Path Finder

Thanks. I hope it successfully gets past the consideration phase 🙂

0 Karma

jtrucks
Splunk Employee
Splunk Employee

I hope there's a solution to this, too!

--
Jesse Trucks
Minister of Magic
0 Karma
Get Updates on the Splunk Community!

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...