All Apps and Add-ons

Splunk App for Stream: Suggestions for enhancements

cmeo
Contributor

Since there's no link to do this...

Setup:
Automatically detect the available network interfaces, and add a dialogue for which one/s to capture on. Configure streamconf.xml.
Set the app's default index to something other than 'main'. This default is not sensible.
Add some way to bulk change streams to use another index. Changing them one by one is painful.
Alternatively, automatically create index 'stream' and use that by default.

Dashboard panels:
The webinar I attended suggested this search:

index=stream |iplocation dest_ip prefix=sip_ allfields=true | geostats longfield=sip_lon latfield=sip_lat count

Why not just add it to the App?

0 Karma

vshcherbakov_sp
Splunk Employee
Splunk Employee

Sorry for long delay in response.. Request acknowledged - will discuss with PM and see what we can do.

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...