Splunk IT Service Intelligence

How to add a hyperlink to Episode Review in Splunk ITSI 4.4.1?


I have information in the episodes shown in the ITSI Episode Review in the form of URLs that reference other systems or the like.
I would like to display the information in these fields as clickable links so that users can open documentation on the error in another browser tab, or jump to the source systems using a remote operations tool, for example.

How can hyperlinks be displayed in ITSI (in addition to the drill-down link) that can be defined in the correlation search?

The configurable drill-down link in the correlation search is already in use for some other hyperlinks.
Is there a way to display additional fields as hyperlinks?

Alternatively, we are thinking about implementing a custom episode action that could enable these hyperlinks.
Does anyone have any experience or examples?

We are using Splunk ITSI Version 4.4.1.

Labels (3)

Splunk Employee
Splunk Employee

Hi Patrick, I would suggest upgrading to version 4.5.0 if you can. Version 4.5.0 includes an Episode Instructions box in each aggregation policy where you can add custom instructions and other information to be displayed in episodes grouped by that policy. The instructions support Markdown so you can add clickable links.

Screen Shot 2020-07-25 at 9.27.14 PM.png


0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!