Enable clickable URLs in CEF data
When a Common Event Format (CEF) field on an artifact contains URL data, the user interface can display a clickable link for it.
- Use this setting to toggle whether clickable links are shown.
- Only CEF values generated by automation or included in an artifact are controlled by this setting.
- Since many URLs in CEF values are likely to be malicious, the default is Off.
Notes can contain URL data, and those URLs will be clickable unless they are escaped using the backtick or grave character ( ` ). URLs in notes are not controlled by this setting.
Create custom CEF fields in
View related data using aggregation rules
This documentation applies to the following versions of Splunk® SOAR (Cloud): current