I want to create a dashboard on severity level , and hardware its causing on, what will be the base search lookalike ?
There not information to work with.
Severity level of what? What hardware? Are the events in Splunk already? Are fields extracted?
like if I have raw data from where I want to pick severity level and create a dash board to see how many times its happening in the month and. details about it like ip address. of Harare etc...
in sparkline format etc.
