Hi all:
Is there an easy way to put a download link in a table? I've got a dashboard with IDS events, and I need to be able to download an associated packet capture. I can construct the link, but when I click on it, the standard drilldown is used.
Something like:
sig, src_ip, src_port, dst_ip, dst_port, user, pcap
Where clicking on the "pcap" field (in a specific row) will retrieve the actual PCAP from where it's stored, via https.
I found this: http://docs.splunk.com/Documentation/Splunk/latest/Developer/EventRendering
But it's fairly complicated, just for a download link. A search command in order to customize the html look and feel of a table cell on the fly would be awesome. (feature request?) 🙂
Thanks!
John
... View more