Can you use a drilldown to set a token and use that token in a URL? If I understand the OP correctly, yes. Here is what I did today and found this post trying to solve this problem. I have a studio dashboard that lists my installed apps in a table. An app may have a hyperlink and I want to navigate to the link from the dashboard. (I simplified this search from what is shown in the image, eliminating inputs, etc.) | rest splunk_server=local /services/apps/local | rename attribution_link as URL | table title label description author version build URL | eval URL=replace(URL,"https|http\:\/\/","") I can now click the URL column and navigate in a new tab to the URL. The URL is set by a token, then another drilldown opens the link. I didn't see a way in the GUI to add two token types, so I used copy/paste to add a 2nd drilldown code segment. The first segment for drilldown one (drilldown.setToken) is in blue, and the 2nd segment (drilldown.customUrl) is in red. lines 22 - 41: "eventHandlers": [ { "type": "drilldown.setToken", "options": { "tokens": [ { "token": "url", "key": "row.URL.value" } ] } }, { "type": "drilldown.customUrl", "options": { "url": "https://$url$", "newTab": true } } ], At first it didn't work. But then I found the drilldown option was set to "false." After setting that to "true" it worked as intended. Hurray! line 5: "drilldown": "true", I hope that helps. Happy Splunking!
... View more