we use 'HiddenSearch' with 'ConvertToIntention' to display results from the 2nd search in the same view.
How can we may only the "Lease IP" cell clickable but not other columns?
Below is the view:
sourcetype=ib:dhcp:lease_history index=ib_dhcp_lease_history | rename host as "Member", ACTION as "Action", LEASE_IP as "Lease IP" | table _time, Member, Action, "Lease IP"
true
false
results
all
sourcetype=ib:dhcp:lease_history index=ib_dhcp_lease_history | rename host as "Member", ACTION as "Action", LEASE_IP as "Lease IP" | table _time, Member, Action, "Lease IP"
addterm
$click.value2$
results
DHCP Lease History for LEASE IP=$click.value2$
addinfo | eval TUPDATE=strftime(info_search_time, "%Y-%m-%d %H:%M:%S %Z")
TUPDATE
Last Updated:
Thanks!
Michael
... View more