Splunk IT Service Intelligence

How to add a hyperlink to Episode Review in Splunk ITSI 4.4.1?


I have information in the episodes shown in the ITSI Episode Review in the form of URLs that reference other systems or the like.
I would like to display the information in these fields as clickable links so that users can open documentation on the error in another browser tab, or jump to the source systems using a remote operations tool, for example.

How can hyperlinks be displayed in ITSI (in addition to the drill-down link) that can be defined in the correlation search?

The configurable drill-down link in the correlation search is already in use for some other hyperlinks.
Is there a way to display additional fields as hyperlinks?

Alternatively, we are thinking about implementing a custom episode action that could enable these hyperlinks.
Does anyone have any experience or examples?

We are using Splunk ITSI Version 4.4.1.

Labels (3)

Splunk Employee
Splunk Employee

Hi Patrick, I would suggest upgrading to version 4.5.0 if you can. Version 4.5.0 includes an Episode Instructions box in each aggregation policy where you can add custom instructions and other information to be displayed in episodes grouped by that policy. The instructions support Markdown so you can add clickable links.

Screen Shot 2020-07-25 at 9.27.14 PM.png


0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...