Exactly my question, and a simple one. Why no answer?
I have:
<row>
<table>
<searchString>table flow,subflow,status,error,logfile | sort flow,utc_time</searchString>
<drilldown>
<link field="logfile">
<![CDATA[
h t t p ://my-url?param=$row.logfile$
]]>
</link>
</drilldown>
</table>
</row>
This results in the logfile cell linking to my url, but other cells bring up the splunk search results which I don't want my users to see. I want those other cells to not be clickable.
I tried:
<option name="drilldown">none</option>
but that completely disables the drilldown.
... View more