Splunk Search

Is there a way to query without using index, source or sourcetype?

Jitendra33
Engager

Hi All,

 

I want to create Multiple tables/Panels inside a dashboard which will have static message like DASHBAORD A, DASHBAORD B, DASHBAORD C etc.. These message's will drill down to respective dashboards A,B and C. 

Currently i am using a query :

index=*  
| head 1
| eval DashboardName="Dashboard A"
|table DashboardName



Is there a way to put a query with static message without to go and search a a set of events using index,source or sourcetype. I don't want to unnecessary use this.

Labels (3)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

Use target="_blank" to open in the new tab

<a href="dashboard_name" target="_blank">blablabla</a>

 https://www.w3schools.com/tags/att_a_target.asp

 

View solution in original post

bowesmana
SplunkTrust
SplunkTrust

Use 

| makeresults
| eval Dashboard="Dashboard A"
| table Dashboard

or you can add an html panel with <a> tags in there

<panel>
  <html>
    <a href="....">Dashboard A</a>
  </html>
</pamel>

Jitendra33
Engager

That really helped @bowesmana . Also while using href, how to use that to open the link in a new tab?

0 Karma

bowesmana
SplunkTrust
SplunkTrust

Use target="_blank" to open in the new tab

<a href="dashboard_name" target="_blank">blablabla</a>

 https://www.w3schools.com/tags/att_a_target.asp

 

Get Updates on the Splunk Community!

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...