Dashboards & Visualizations

Splunk Simple XML : Invalid character entry in XML help with CDATA in href

koshyk
Super Champion

hi UI gurus,
we have a simple requirement to display certain links in a dashboard. All is good until there is invalid (un-encoded) characters involved. then if I use [[CDATA]] then Splunk simple XML takes the values as literal

Below is dashboard we want to achieve

<dashboard>
  <label>test HREF CDATA</label>
  <row>
    <html>
            <h1>
                HREF test with un-encoded characters
            </h1>
            <li>Lookup Links
                <ul>
                    <li>My Lookup => 
                    <a href="../lookup_editor/owner=nobody&namespace=search&lookup=xyz.csv&type=csv">Link</a>
                    </li>
                </ul>
            </li>
    </html>
  </row>
</dashboard>

Since the href is "un-encoded", this complains. When we change the <a> link as below

<![CDATA[<a href="../lookup_editor/owner=nobody&namespace=search&lookup=xyz.csv&type=csv">Link</a>]]> 

Then splunk XML does not render href properly.
What's the best way to use "href" links properly in Simple XML?

PS: Even <link> don't like & in the URL as below also have same problem

   <link>
        ../lookup_editor/owner=nobody&namespace=search&lookup=xyz.csv&type=csv
   </link>

xx

0 Karma

to4kawa
Ultra Champion

how about $url|u$?

    <drilldown>
      <set token="a_link">$click.value2$</set>
       <eval token="url">trim(mvindex(split($a_link$,"("),1),")")</eval>
       <link target="_blank">
         <![CDATA[ https://httpbin.org/json ]]></link>
    </drilldown>

this works

0 Karma

koshyk
Super Champion

Got the gist of the logic. Thanks again. If you want to put as answer, will mark as "answer"

0 Karma

koshyk
Super Champion

but in the above, where are we passing the "token" to the link URL?

0 Karma

to4kawa
Ultra Champion

If you write statically, you only have to convert this problem when writing it, right?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...