Dashboards & Visualizations

Are there any docs about the component messages DateParserVerbose,LineBreakingProcessor, etc. ?

ddrillic
Ultra Champion

From a colleague on our team -

Does anybody have any info (links) on the component messages (DateParserVerbose,LineBreakingProcessor, etc) of the _internal index and their meanings? I am working on dashboards that use them and interested in what they mean. I can't find any documentation on these. I am interested if there is a link out there to a list of the messages and their meaning.

0 Karma
1 Solution

MuS
SplunkTrust
SplunkTrust

Hi dddillic,

you are looking for this https://docs.splunk.com/Documentation/Splunk/latest/Data/Resolvedataqualityissues#Event_breaking.2C_...

Also, check out the MC dashboard https://<servername>/en-GB/app/splunk_monitoring_console/data_quality which will give what you want to create as dashboard.

Hope this helps ...

cheers, MuS

View solution in original post

MuS
SplunkTrust
SplunkTrust

Hi dddillic,

you are looking for this https://docs.splunk.com/Documentation/Splunk/latest/Data/Resolvedataqualityissues#Event_breaking.2C_...

Also, check out the MC dashboard https://<servername>/en-GB/app/splunk_monitoring_console/data_quality which will give what you want to create as dashboard.

Hope this helps ...

cheers, MuS

ddrillic
Ultra Champion

Much appreciated @Mus.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...