Splunk Search

how to create hyperlink that directs to search query on splunk dashboard

REACHGPRAVEEN
Explorer

Hello , Please help on the below:

it should look like below 2 rows

search by employeeid(hyperlink)

search by app(hyperlink)

once clicked on above  hyperlinks it should open new search with search query

index = x  | search employeeid =123

index= x | search app = abc

 

Please help on this. Thanks in advance

Labels (1)
0 Karma

to4kawa
Ultra Champion
<dashboard>
  <label>link_drilldown</label>
  <row>
    <panel>
      <table>
        <search>
          <query>| makeresults
| eval employeeid =123
| append [| makeresults | eval app = "abc"]</query>
          <earliest>-24h@h</earliest>
          <latest>now</latest>
          <sampleRatio>1</sampleRatio>
        </search>
        <option name="count">50</option>
        <option name="dataOverlayMode">none</option>
        <option name="drilldown">cell</option>
        <option name="percentagesRow">false</option>
        <option name="rowNumbers">false</option>
        <option name="totalsRow">false</option>
        <option name="wrap">true</option>
        <drilldown>
          <link target="_blank">/app/search/search?q=index=x%20$click.name2$=$click.value2$</link>
        </drilldown>
      </table>
    </panel>
  </row>
</dashboard>
0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...