Splunk Search

run a splunk query using a hyperlink

kylegoldberg
New Member

Hi,

I am creating a dashboard that will present various aspects of a given session, with the goal being to additionally include a hyperlink that will link to splunk and start running the query embedded in the link.

For example, the query may be -

sourcetype="blah" "data.sessionId"=12345abcde

The sessionId input would change dynamically based on which hyperlink the user clicks in the dashboard. I am having trouble figuring out how to embed the query into the hyperlink so that it will run. By running the query myself in splunk, the issue appears to be that there needs to be an SID in the hyperlink to run a query, but you can't generate that beforehand.

Any advice here would be much appreciated.

Thank you.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...