Splunk Search

How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

krishnarajapant
Path Finder

Hi Experts,

I want to drilldown from my table in the dashboard to an external URL for which has to pick the hostname of the URL from the table hostname field.

Below is my drilldown code in table tag.

<condition field="service_name">
            <link>
              <![CDATA[

              http://$row.hostname$/runprocess.dsp?interface_instance_id=$row.interface_instance_id/]]>
           </link>
<condition>

When I hard-code the host name to specific host, then the drilldown is working as expected, whereas if I'm using variable, then drilldown behavior is not working.

Not sure what am I missing here.

-Krishna Rajapantula

0 Karma

somesoni2
Revered Legend

Try something like this

<dashboard>
  <label>Dynamic WebSite Launcher</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval site="google microsoft bing apple" | table site | makemv site | mvexpand site</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
         <option name="drilldown">row</option>    
        <drilldown target="_blank">          
             <link>
                 http://www.$row.site$.com
            </link>
       </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma

krishnarajapant
Path Finder

Updated the code below in a screenshot.

-Krishna Rajapantula

0 Karma

krishnarajapant
Path Finder

Hi Experts,

Any solution available for the above query?

-Krishna Rajapantula

0 Karma

krishnarajapant
Path Finder

alt text

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...