Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Admin Other
- :
- Knowledge Management
- :
- What are some best practices for knowledge object ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What are some best practices for knowledge object relationships mapping?
Hello,
In MS Access there is a Relationships Manager "tool" to keep track of how the tables, forms, searches, etc. relate to each other in a database app. Is the same available in Splunk? If not, what has been your own Best Practices, besides using a spreadsheet, to keep track of what reports, dashboards, lookup tables, and definitions, etc. are interrelated to each other?
Thanks in advance and God bless,
Genesius
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Such a thing sounds like a solution to a problem. Would you elaborate on your problem or challenge? It would be interesting to hear what gaps exist and how such a UI could help you.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @genesiusj.
No, there is no relationships manager tool. You can get a listing of all dashboards, reports, and other knowledge objects using REST commands. So it would be pretty easy to build dashboards and get this kind of info.
Relationships becomes a problem easily though because there is no way to link and find where a macro is being used or on which dashboard a report is used.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the answer, @DavidHourani
Perhaps a nice-to-have Splunk can add to version 8.
God bless,
Genesius
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yeah, could be a great ad on.
It's actually possible to build it if you're indexing your configuration files but it's not easy to make as you'll have to manually put trackers for all newly added knowledge objects.
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Announcing Modern Navigation: A New Era of Splunk User Experience
Modernize your Splunk Apps – Introducing Python 3.13 in Splunk
Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...
