cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Link from CAS to SPLUNK

tarjei
Organizer

I know that the format for a splunksearch request is quite similar to the format for a CAS request,
 

http://splunksearch/en-GB/app/klp_filenet/search?
q=search%20index%3D%22polopoly%22%20sourcetype%3Dlog4j
&earliest=-60m%40m
&latest=now
&display.events.timelineEarliestTime=
&display.events.timelineLatestTime=
&sid=1432296251.50

With this in mind I would like to know whether it is possible to create a "Custom report" link that serves the splunk content and gets the time parameters from CAS

This specific customer is using version 12.2.2 

3 REPLIES 3

adam_piotrowicz
Dynatrace Pro
Dynatrace Pro

Tarjei,

Does Drilldown URL Link Parameters? thread would be helpful?

 

tarjei
Organizer

Well, I guess only sort of. That thread shows how to pass one of the fields as another variable, but it does not show how to (if possible) to pass the time variables

(startTime=1402873200000 and endTime=1402914300000)  as other names, namely display.events.timelineEarliestTime=<XXX>&display.events.timelineLatestTime=<XXX>

Do you know if this is possible?


No, that sounds like Feature Enhancement