Dashboards & Visualizations

What is the best way to Identify data by application (Dashboard)?

bclaydonlight
New Member

Currently, we have indexes configured for prod, qa and dev. However, we have no way to filter data by the application/service other than using the source type and/or hostname.

Is there a way to tag the data by application rather than creating manual queries within a dashboard?

Many thanks in advance.

Tags (1)
0 Karma
1 Solution

pkeenan87
Communicator

As @adonio mentioned, tagging is a valid option. You could also create a lookup file with a mapping of sourcetypes to applications. It may be easier to manage this if you have the Lookup File Editor app installed.

Lookups: https://docs.splunk.com/Documentation/Splunk/7.2.4/Knowledge/ConfigureCSVlookups
Lookup File Editor: https://splunkbase.splunk.com/app/1724/

View solution in original post

0 Karma

pkeenan87
Communicator

As @adonio mentioned, tagging is a valid option. You could also create a lookup file with a mapping of sourcetypes to applications. It may be easier to manage this if you have the Lookup File Editor app installed.

Lookups: https://docs.splunk.com/Documentation/Splunk/7.2.4/Knowledge/ConfigureCSVlookups
Lookup File Editor: https://splunkbase.splunk.com/app/1724/

0 Karma

adonio
Ultra Champion

well, you did mention tag in your question, maybe give it a shot:
https://docs.splunk.com/Documentation/Splunk/7.2.4/Knowledge/Abouttagsandaliases

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...

Splunk and Fraud

Watch Now!Watch an insightful webinar where we delve into the innovative approaches to solving fraud using the ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...