Knowledge Management

How to extend the dropdown menu beside a field in results

tpflicke
Path Finder

When a field is selected to be shown in the results, the field appears with a collapsed dropdown menu containing the items 'Tag =' and 'Report on Field'.

I would like to extend this menu with additional items for some fields.

Example
I extract and show the user_id in the results.
In the menu I want to display an item that, when clicked, opens the URL http://somedomain/display?user_id=6787765685 in a new browser tab/window

BTW, ideally I want to build the URL from more than just one field value, e.g. http://somedomain/display?user_id=6787765685&date=20140131&firstname=Fred

The HTML of the menu (before modifications) looks like:

<div class="outerMenuWrapper splShadow splMenu splMenu-primary" style="display: none; top: 556px; left: 975px;">
  <ul>
    <div class="innerMenuWrapper">
      <li class="">
        <a href="javascript:void(0);" tabindex="-1" class="menuItemLink" s:fieldname="user_id" s:fieldvalue="6787765685">
          Tag user_id=6787765685</a></li>
      <li class=""><a href="javascript:void(0);" tabindex="-1" class="menuItemLink" s:fieldname="user_id" 
        s:fieldvalue="6787765685">Report on field</a></li>
    </div>
  </ul>
</div>
0 Karma
1 Solution

bwooden
Splunk Employee
Splunk Employee

You won't need to modify the view. Splunk supports that via an out of box feature called workflow actions. The Knowledge Manager Manual has a good explanation along with examples. You should be able to implement in a few minutes.

View solution in original post

bwooden
Splunk Employee
Splunk Employee

You won't need to modify the view. Splunk supports that via an out of box feature called workflow actions. The Knowledge Manager Manual has a good explanation along with examples. You should be able to implement in a few minutes.

tpflicke
Path Finder

Thanks, that's exactly what I was looking for.

0 Karma
Get Updates on the Splunk Community!

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...