That is exactly what you can do with the add on.  Effectively the button can set a token and then the SPL containing the curl command can execute and notify your backend server to perform whatever you need it to. In Splunk everything is a search, so you will just have a hidden search that is dependent on the token that can be set by the button. Clicking the button will set the token, causing the SPL to run. See the Custom Token Links example in the Splunk Dashboard Examples app, which shows you how to do buttons/tokens. Then your SPL would be something like this, where the curl_button_token token is set by the button and cleared again when the search has run. <search depends="$curl_button_token$"> <query> | curl ... </query> <done> <unset token="curl_button_token"></unset> </done> </search>   ... View more