A workflow action can also link to an external site, using information from an event.
Let's imagine that your organization has some other web-based tool. If that tool can accept arguments via GET or POST requests, then we can link directly to it from the Splunk results.
Create a new workflow action as we did in the previous example, but change Action type to link. The options change to those shown in the following screenshot:
Splunk will encode any variables in the URL so that special characters survive. If you need a variable to not be encoded—for instance, if the value is actually part of the URL—add an exclamation ...
