Now I'm starting to understand the use case. Normally, a dashboard panel presents data in a simplified form and then offers a drilldown into more specific information. In this case, the table is the simple form and the drilldown would be to the raw data. The drilldown is the "hyperlink" you seek. Data in the table will not be underlined so users would have to be educated about the drilldown's availability (perhaps in the panel description). <row>
<panel>
<table>
<search>
<query>index="abc*" sourcetype=600000304_gg_abs_ipc2 sourcetype = "600000304_gg_abs_ipc2" " AssociationProcessor - compareTransformStatsData : statisticData: StatisticData" source="/amex/app/gfp-settlement-transform/logs/gfp-settlement-transform.log" |rex " AssociationProcessor - compareTransformStatsData : statisticData: StatisticData totalOutputRecords=(?<totalOutputRecords>), totalInputRecords=(?<totalInputRecords>),busDt=(?<busDt>),fileName=(?<fileName>),totalClosingBal=(?<totalClosingBal>)"|table _time totalOutputRecords totalInputRecords busDt fileName totalClosingBal</query>
<earliest>$field1.earliest$</earliest>
<latest>$field1.latest$</latest>
<sampleRatio>1</sampleRatio>
</search>
<option name="count">20</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">all</option>
<option name="percentagesRow">false</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
<drilldown>
<link target="_blank">search?q=index="abc*" sourcetype=600000304_gg_abs_ipc2 sourcetype = "600000304_gg_abs_ipc2" " AssociationProcessor - compareTransformStatsData : statisticData: StatisticData" source="/amex/app/gfp-settlement-transform/logs/gfp-settlement-transform.log" _time=$row._time$ |rex " AssociationProcessor - compareTransformStatsData : statisticData: StatisticData totalOutputRecords=(?<totalOutputRecords>), totalInputRecords=(?<totalInputRecords>),busDt=(?<busDt>),fileName=(?<fileName>),totalClosingBal=(?<totalClosingBal>)" | where (totalOuputRecords=$row.totalOuputRecords$ AND totalInputRecords=$row.totalInputRecords$ AND busDT=$row.busDT$ AND fileName=$row.fileName$ AND totalClosingBal=$row.totalClosingBal$)</link>
</drilldown>
</table>
</panel>
</row> The drilldown link will have to be URL-encoded, but the dashboard editor UI will do that for you.
... View more
