A user wants to add a link to an existing dashboard from an alert. When they click the dimension value in the alert message, they are taken to the…

In Splunk, there are two primary methods to create contextual links from alerts to dashboards. Global data links (A) allow you to define reusable link templates that can pass context values as tokens to target dashboards. Adding a link to the field (C) enables field-level drilldowns where clicking a specific field value passes that value as context to the destination dashboard. Both methods preserve the dimension value context when navigating from the alert to the dashboard.

B. Runbook URLs are for external documentation/procedures, not for contextual dashboard navigation with dimension values.

D. Alert message body links are static text without the ability to dynamically pass clicked dimension values as context.

1. Splunk Documentation - "Configure data links" - Observability Cloud Documentation, Section on Global Data Links and Field Links

2. Splunk Documentation - "Create custom drilldowns" - Enterprise Documentation, Drilldown Configuration Guide

3. Splunk Documentation - "Alert actions and tokens" - Enterprise Platform Documentation, Alert Configuration Reference

4. Splunk Documentation - "Dashboard drilldown behavior" - Dashboard Studio Documentation, Interactive Elements Section

5. Splunk Documentation - "Link to dashboards from alerts" - Observability Cloud User Guide, Alert Management Section