A while back, I wrote blog post explaining how to RDP to a Windows Server from a Splunk Dashboard. The steps involved the following:
- Create a Controller – this generates the .rdp file on the server and delivers it to the client.
- Create a custom endpoint in web.conf – this part enables url access to the controller created above.
- Add Javascript to the dashboard – this part renders the icon and passes the necessary parameters to the controller (via the custom endpoint).
All the nitty-gritty details were spelled out in the blog post. However, if you learn better by example (like I do), then there is a new GitHub repo that has a working example for you. In the example, I am just using a lookup file to list some servers, but you would use a “real” search for your environment. Anyway, the link is below: