Splunk Enterprise Security: Is it possible to embed an Adaptive Response hyperlink into the Notable Event Next Steps?

[jwiedemann_splu]

I know that it is possible to embed an Adaptive Response hyperlink into the next steps section of Splunk Enterprise Security (ES), however I'm wondering if you can embed plain old hyperlinks to other Splunk dashboards and even external sites within the next steps. I've attempted several permutations of steps with hyperlinks and wasn't able to get any of them to work as I expected

According to the Splunk documentation here: http://docs.splunk.com/Documentation/ES/4.6.0/User/IncludedResponseActions#Create_a_notable_event it says that hyperlinks are supported but I'm thinking that's only relevant to Adaptive Response actions that have been added to your environment

[Splunker]

One way to achieve your goal is to maybe have your "next steps" link implemented as a workflow action?

Cheers.

[smoir_splunk · Accepted solution]

"You can only type plain text and links to response actions"
Only links to adaptive response actions. Hyperlinks are not supported in next steps or the description field for notable events. Links included will be visible but not clickable.