Splunk Search

how to create hyperlink for a plain text that directs to search query on splunk dashboard

REACHGPRAVEEN
Explorer

Hi ,

Please help on this @niketn

the below 2 rows as single panel

search by employeeid(hyperlink)

search by app(hyperlink)

once clicked on above  hyperlinks it should open new search with search query

index = x  | search employeeid =123

index= x | search app = abc

 

Thanks in advance

Labels (1)
0 Karma
1 Solution

renjith_nair
Legend

are you looking for something similar?

<dashboard>
  <label>Hyperlinks</label>
  <row>
    <panel>
      <single>
        <search>
          <query>|makeresults|eval message="search by employeeid"</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">all</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <link target="_blank">search?q=index%20%3D%20x%20%20%7C%20search%20employeeid%20%3D123&amp;earliest=-15m&amp;latest=now</link>
        </drilldown>
      </single>
      <single>
        <search>
          <query>|makeresults|eval message="search by app"</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">all</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <link target="_blank">search?q=index%3D%20x%20%7C%20search%20app%20%3D%20abc&amp;earliest=-15m&amp;latest=now</link>
        </drilldown>
      </single>
    </panel>
  </row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂

View solution in original post

0 Karma

renjith_nair
Legend

are you looking for something similar?

<dashboard>
  <label>Hyperlinks</label>
  <row>
    <panel>
      <single>
        <search>
          <query>|makeresults|eval message="search by employeeid"</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">all</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <link target="_blank">search?q=index%20%3D%20x%20%20%7C%20search%20employeeid%20%3D123&amp;earliest=-15m&amp;latest=now</link>
        </drilldown>
      </single>
      <single>
        <search>
          <query>|makeresults|eval message="search by app"</query>
          <earliest>-15m</earliest>
          <latest>now</latest>
        </search>
        <option name="drilldown">all</option>
        <option name="refresh.display">progressbar</option>
        <drilldown>
          <link target="_blank">search?q=index%3D%20x%20%7C%20search%20app%20%3D%20abc&amp;earliest=-15m&amp;latest=now</link>
        </drilldown>
      </single>
    </panel>
  </row>
</dashboard>
---
What goes around comes around. If it helps, hit it with Karma 🙂
0 Karma

REACHGPRAVEEN
Explorer

Hi renjith_nair,

 

the link opened breaks in sometime . is it with time picker? May i know how to decrease the font of single value displayed please.. Thanks in advance

0 Karma

REACHGPRAVEEN
Explorer

ThankYou so much @renjith_nair  I appreciate your time and response

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...