Dashboards & Visualizations

How to add hyperlink to column value in Splunk dashboard?

d867748
Engager

Hi,
Can someone please advise how to add a hyperlink to the column fields in a table?

E.g.
How can I make NewField value a hyperlink to Field1 values (e.g. ID01 and ID02 ) in the table below instead of separate field?

Table:
Field1 NewField
ID01 http://company.test.com/page-ID01
ID02 http://company.test.com/page-ID02`

<panel>
      <title>Report Title</title>
      <table>
        <search>
          <query>index=xxx
          | fields Field1, Field2, ...
          | eval NewField = "hyperlinkhttp://company.test.com/page-".Field1
          | table Field1, NewField]   
           <earliest>$datefield.earliest$</earliest>
          <latest>$datefield.latest$</latest>
          <sampleRatio>1</sampleRatio>
        </search>
      </table>
    </panel>
</row>`

d867748
Engager

Many thanks @martin_mueller and @niketnilay for your responses, will try out the suggestions.

0 Karma

niketn
Legend

@d867748, Another alternative would be to use SimpleXML table configuration <fields> to hide NewField from the table (list only the fields that should be displayed) and still use the same for drilldown using $row.NewField$. You should check out Splunk Dashboard Examples app from Splunkbase for various drilldown examples including this one.

  <row>
     <panel>
       <title>Report Title</title>
       <table>
         <search>
           <query>| makeresults
           | eval Field1="ID01"
           | eval NewField = "http://www.company.test.com/page-".Field1
           | table Field1, NewField</query>
            <earliest>-1s</earliest>
           <latest>now</latest>
           <sampleRatio>1</sampleRatio>
         </search>
         <fields>["Field1"]</fields>
         <drilldown>
           <link target="_blank">$row.NewField|n$</link>
         </drilldown>
       </table>
     </panel>
  </row>
____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Store your URL in a field starting with an underscore, e.g. _url, use a drilldown on column Field1 and <link> to $row._url$.

See https://docs.splunk.com/Documentation/Splunk/7.2.6/Viz/PanelreferenceforSimplifiedXML#drilldown for docs on drilldowns, conditional drilldowns working only on specific columns are right below that.

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...