Knowledge Management

Any good knowledge object/dependency management techiques out there?

dstaulcu
Builder

So.. With a lot of reports that are dependent on lookup tables.. Dashboards dependent on saved reports, and so on, it's easy to break dependencies of you are not careful.

Short of manual regression testing every report, dashboard, etc, does anyone have any efficient techniques for verifying accessibility dependent lookup tables, macros, etc for reports. Or saved searches for dashboards?

I've been noticing a bunch of missing dependencies among reports I haven't visited in a while.. Was thinking we need an efficient way to see how broad such problems are.

Was also thinking if would be useful if the knowledge object management interface in splunk web provided some sort of dependency enumeration (and perhaps search and replace) upon request for delete or clone or rename, etc. Just thinking out loud.

Anyone run into problems like this? Have a good way to mananage such change?

Tags (1)

AndreasBalster
Explorer

I'm having the exact same issues, especially dependencies breaking and intransparency of the config.

I'd highly welcome the features you mentioned since it would greatly reduce the time and brains spent on finding all the dependencies which a certain knowledge object participates in.

For the time being, my approach to finding all the dependencies of an object is to grep for the object name. This of course does not always find everything (especially the metadata are good at hiding stuff since the object names in there are url-encoded...) and every change needs to be thoroughly tested.

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...