Knowledge Management

Event Type form tag name completion

sbarinov
Path Finder

Is there any way to make the event type form's field "tag" auto-complete tag names based on existing tags?
Are there any plans for this feature in upcoming releases?

It is very easy for one to make a mistake in tag name when using a single tag in multiple event types.
It appears for me that it is a base requirement for setting a field with side-registry values, like multi-select fields in Jira.

0 Karma

woodcock
Esteemed Legend

Why are you doing so much eventtype creation/modification? This is almost always a "once per sourcetype per datamodel" endeavor. Are you talking about inside of splunk or JIRA?

0 Karma

sbarinov
Path Finder

We are going to continuously create new event types when we discover new patterns of received log events.
We are linking alerts with event types via tags so the set of tags will be rarely changed but new event types will keep coming so we want to be sure that we assign correct tags to them so we don't miss new hits of the same pattern.

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...