Dashboards & Visualizations

Show results in Grafana from app other than "Search & Reporting" app

mukeshchandak
Engager

I have an Splunk app named "E-Bark", when I run a query in search bar in this app I can see the results but not when I run that same query in "Search & Reporting". 

I want to visualize the results in Grafana but Grafana is fetching data from indices corresponding to "Search & Reporting" only.

Do I need to make any change to the search query?

Labels (3)
0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Sounds to me as if some knowledge objects are scoped to only be visible in your E-Bark app. You can either change  visibility for the required knowledge objects to be Global vs. app-only, or you can execute searches using REST using your app's context vs. the S&R app context. Not sure how the Grafana integration works. 

0 Karma

mukeshchandak
Engager

@s2_splunk Thanks for helping me with the approach. Can you pls let me know how can the scope of certain indices be changed to Global from app-only.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

I recommend you start here.

One thing to note: indexes are not knowledge objects. Access to indexes is configured in role settings. And then there are app permissions as well that may limit what you can and cannot do. 

Maybe I am misunderstanding the issue you are having completely. 

0 Karma
Get Updates on the Splunk Community!

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...