how to create custom drilldown/hyperlink for columns values in a table

[rijinc]

Hi
I am not sure if this is possible in Splunk.

I have a field values with Hyperlinks in a table. ex:

Name | Age | Webpage
Rijin 31 https;//www/rijin.app.com/31/how.html
Rijin1 32 https;//www/rijin1.app.com/32/hello.html

I want to get rid of this hyperlink from the table as the user should be able to click on the table and redirect to the Webpage links in
each rows
For ex: if add eval Webpage as Link and

Name | Age | Webpage
Rijin 31 Link
Rijin1 32 Link

I don't know how its possible to drilldown the column Webpage where i click on the Link and it should redirect to the Webpage for Rijin, Rijin1 and so on

[woodcock]

I think that you are asking if you can obscure the actual link and replace it with a name/label but still allow the drilldown action to go to the URL (which is no longer displayed). You can do this, but it will take some work.
First, you need a lookup file which contains the name and URL pairs (you can create this on the fly from a search using ... | outputlookup let's call this links.csv.
Now you have a table of events with 3 fields: Name, Age, and Webpage.
Add to the bottom of your search this SPL:

... | rename Webpage AS _Webpage | lookup links.csv URL AS _Webpage OUTPUT URL AS Webpage

You have hidden the field with the URL so the user will not see it but when the user clicks on a row, you can get the URL from the $click._Webpage$ token.

[rijinc]

Thanks for the reply

I think that you are asking if you can obscure the actual link and replace it with a name/label but still allow the drilldown action to go to the URL (which is no longer displayed). - Yes correct

Problem here is links are not static it changes everyday hence updating lookup file everyday, currently it's 18000k records and keeps on changing and increasing.

[woodcock]

The invisible link part of my answer is what you need but the map from URL to name needs some kind of solution too. I suggested a lookup but you might do something else (maybe the events have both the URL and the name).

[rijinc]

thanks its worked.
one challenge if i give cell /row drilldown the whole row is highlighted is there a way to just highlight the URl column ( ex here is the Webpage)

Is it possible in splunk or javascript etc?

[woodcock]

That is a different question entirely so you should click Accept to close this question and ask a new one.