When a field is selected to be shown in the results, the field appears with a collapsed dropdown menu containing the items 'Tag
I would like to extend this menu with additional items for some fields.
Example
I extract and show the user_id in the results.
In the menu I want to display an item that, when clicked, opens the URL http://somedomain/display?user_id=6787765685 in a new browser tab/window
BTW, ideally I want to build the URL from more than just one field value, e.g. http://somedomain/display?user_id=6787765685&date=20140131&firstname=Fred
The HTML of the menu (before modifications) looks like:
<div class="outerMenuWrapper splShadow splMenu splMenu-primary" style="display: none; top: 556px; left: 975px;">
<ul>
<div class="innerMenuWrapper">
<li class="">
<a href="javascript:void(0);" tabindex="-1" class="menuItemLink" s:fieldname="user_id" s:fieldvalue="6787765685">
Tag user_id=6787765685</a></li>
<li class=""><a href="javascript:void(0);" tabindex="-1" class="menuItemLink" s:fieldname="user_id"
s:fieldvalue="6787765685">Report on field</a></li>
</div>
</ul>
</div>
You won't need to modify the view. Splunk supports that via an out of box feature called workflow actions. The Knowledge Manager Manual has a good explanation along with examples. You should be able to implement in a few minutes.
You won't need to modify the view. Splunk supports that via an out of box feature called workflow actions. The Knowledge Manager Manual has a good explanation along with examples. You should be able to implement in a few minutes.
Thanks, that's exactly what I was looking for.