How it works...

This recipe is similar to the previous recipe in approach. When your search results are rendered in the event listing, Splunk will match the returned fields and event types with the workflow actions you have configured and present the dropdown workflow actions as required. In this case, the status field was matched with the Google workflow action you created.

The basic GET link method used in this recipe will insert the variable value into the URL for the user to click on. In this case, the $status$ field variable inserts the HTTP status code into the Google search query URL so that the status code is passed within the URL when it is clicked on:

By utilizing the field name substitution in the label and the URI, you can create ...

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.