Splunk Search

How to create a drilldown from my dashboard table to an external URL that has to pick the hostname of the URL from the table?

krishnarajapant
Path Finder

Hi Experts,

I want to drilldown from my table in the dashboard to an external URL for which has to pick the hostname of the URL from the table hostname field.

Below is my drilldown code in table tag.

<condition field="service_name">
            <link>
              <![CDATA[

              http://$row.hostname$/runprocess.dsp?interface_instance_id=$row.interface_instance_id/]]>
           </link>
<condition>

When I hard-code the host name to specific host, then the drilldown is working as expected, whereas if I'm using variable, then drilldown behavior is not working.

Not sure what am I missing here.

-Krishna Rajapantula

0 Karma

somesoni2
Revered Legend

Try something like this

<dashboard>
  <label>Dynamic WebSite Launcher</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| gentimes start=-1 | eval site="google microsoft bing apple" | table site | makemv site | mvexpand site</query>
          <earliest>0</earliest>
          <latest></latest>
        </search>
         <option name="drilldown">row</option>    
        <drilldown target="_blank">          
             <link>
                 http://www.$row.site$.com
            </link>
       </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma

krishnarajapant
Path Finder

Updated the code below in a screenshot.

-Krishna Rajapantula

0 Karma

krishnarajapant
Path Finder

Hi Experts,

Any solution available for the above query?

-Krishna Rajapantula

0 Karma

krishnarajapant
Path Finder

alt text

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...