Splunk IT Service Intelligence

How to add a hyperlink to Episode Review in Splunk ITSI 4.4.1?


I have information in the episodes shown in the ITSI Episode Review in the form of URLs that reference other systems or the like.
I would like to display the information in these fields as clickable links so that users can open documentation on the error in another browser tab, or jump to the source systems using a remote operations tool, for example.

How can hyperlinks be displayed in ITSI (in addition to the drill-down link) that can be defined in the correlation search?

The configurable drill-down link in the correlation search is already in use for some other hyperlinks.
Is there a way to display additional fields as hyperlinks?

Alternatively, we are thinking about implementing a custom episode action that could enable these hyperlinks.
Does anyone have any experience or examples?

We are using Splunk ITSI Version 4.4.1.

Labels (3)

Splunk Employee
Splunk Employee

Hi Patrick, I would suggest upgrading to version 4.5.0 if you can. Version 4.5.0 includes an Episode Instructions box in each aggregation policy where you can add custom instructions and other information to be displayed in episodes grouped by that policy. The instructions support Markdown so you can add clickable links.

Screen Shot 2020-07-25 at 9.27.14 PM.png


0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...