How do you access SII reports directly?

[jackpal]

I've saved a few charts in SII as reports so they could be embedded in another application. I've found no direct way of accessing these reports from SII. As a workaround, I've changed permissions to show in every app so they can be managed from the Search app. How does one access custom SII reports directly?

[jackpal · Accepted solution]

Thanks, I did not explain that I am integrating SII into an existing Enterprise installation. I am able to do what I need to at this point. Thanks.

[mstjohn_splunk]

Hey @jackpal,

Glad you figured out a solution to your problem. Would you mind writing an answer explaining how you solved it? If you could do that, and then approve it, it would serve as a guide for future splunkers with similar issues.

Thanks!!

[jackpal]

Well when the charts are displayed for a metric like user cpu time for example there are options to do a few things.

• Create Alert
• Open in Search
• Save as Dashboard Panel
• Save as Report
• Clone this Panel
• Export as PNG
• Export as CSV

Based on the two options above (save as dashboard panel and save as report) I assumed I should be able to access them after creation and modify as needed. The normal dialog for permissions, scheduling, etc comes up after creation however unless I specify in permissions to share for all apps I am unable to access the report later to edit. That was basically my question.

So my workaround is just share with all apps when creating reports or panels or reports. This way if I need to edit the report I can access it in the search app and modify as needed. Like I mentioned earlier, I have an enterprise installation so I might probably have more abilities than somebody using the standalone version.

[mstjohn_splunk]

thanks @jackpal, our community loves ya for the explanation 🙂

[abrown_splunk]

Hi Jackpal - within the context of SII (the INSIGHT), the idea is that this is a stand-alone product. It is scoped to a specific use case and that's it. When you are talking about custom reports and dashboards, this is something you should do within Splunk Enterprise, using the Splunk APP for Infrastructure which supports a richer (and more complicated) experience. Does that make sense?