Is there a way to construct a URL that will render as a hyper link in the alerts dashboard that will allow the user to review (Highlighted fields) the alert and then show a hyperlink to the external asset that the information was ingested from. It would be nice to have a simple solution that would a…

Yes. The most practical approach is to put the external URL into a field on the source event (for example url.full or your own field like external.asset.url), make sure that field is copied into the generated alert, and then format that field as a URL in Kibana (Stack Management → Data Views → pick …

Thanks that confirm what I have been doing with a pipeline that constructs the url to pass to api endpoint. I just wish there was a simpler way. My customer uses a tone of other assets, and it would be nice to have it render as a clickable link in a highlighted field.

Elastic Rule Alert With External hyper link field creation in highlighted Fields [feature request]

Elastic Security SIEM

system (system) Closed March 13, 2026, 2:35am 4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Elastic rule Hyperlinks in Highlighted Fields Elastic Security detection-rules	2	30	February 13, 2026
Kibana SIEM "External Alert" SIEM	4	1770	April 16, 2020
Kibana Alerts - Alert Details URL Kibana elastic-stack-alerting	2	633	November 10, 2023
How to get the List of highlighted fields attached per rule in Alerts flyout in Security Analytics Elastic Security	8	294	June 24, 2025
Make kibana.alert.url clickable Kibana elastic-stack-alerting	0	17	October 14, 2024

Elastic Rule Alert With External hyper link field creation in highlighted Fields [feature request]

Related topics