Splunk Enterprise Certified Admin — Question 70

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:
<search>
<query>index news sourcetype web_proxy | table sourcetype title link
</query>
</search>
Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?

Answer options

• A. <option name ג€link.openSearch.viewTarget">$row.link
  lt;/option>
• B. <drilldown> <link target=ג€ blank">$row.link$</link> </drilldown>
• C. <drilldown> <link target="_blank">$row.link|n
  lt;/link> </drilldown>
• D. <drilldown> <link target ג€_blank">http://localhost:8000/debug/refresh</link> </drilldown>

Correct answer: A

Explanation

Option A is correct because it appropriately utilizes the $row.link$ syntax to dynamically reference each link in the table. The other options are incorrect due to syntax errors or improper formatting that would prevent them from functioning as intended for dynamic drilldowns.