Splunk Search

Is it possible to add another secondary search option to the Event Details menu currently containing "Add to search", "Exclude from search", "New search"?

todd0
New Member

I would like to add an item to the results screen context menu to run a macro with the highlighted data as a parameter when (the menu that currently contains menu items "Add to search", "Exclude from search", "New search").

I would like to add an item to the menu options covered on this page of documentation:
http://docs.splunk.com/Documentation/Splunk/6.2.2/Search/Drilldownoneventdetails

Is this possible?

Tags (4)
0 Karma

bengbrewer
Engager

3 1/2 years later, there is not a supported solution to this problem?

jpvlsmv
Path Finder

Not in a good way.

The mouseclick events are in $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/js/views/shared/eventsviewerdrilldown/SegmentationDrilldown.js

Your modifications to this would be overwritten by splunk upgrades.

Alternatively, you might (with a little jquery DOM magic) locate the

    that contains an
and insert your own
  • into it at page-render (actually at item-click) time.
  • Something along the lines of:
    $("a.curr_inc_val").parent().parent().append('<li>Your Item here</li>')
    which you can test with a reasonable Javascript console like Firebug.

    --Joe

    Get Updates on the Splunk Community!

    Build Your First SPL2 App!

    Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...

    Exporting Splunk Apps

    Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...

    [Coming Soon] Splunk Observability Cloud - Enhanced navigation with a modern look and ...

    We are excited to introduce our enhanced UI that brings together AppDynamics and Splunk Observability. This is ...