Splunk Enterprise Security

How to organize my columns, in a table, by urgency for tracking KPI for notable events?

mmcg
Explorer

I would like to organize a table for tracking KPI for notable events like so:

No. of Critical No. of High No. of Medium   No. of Low  TOTAL
KPI (%)                 KPI (%)...
# in SLA
# Out 
# open/unassigned. 

But I'm struggling to find a way to organize my columns by the urgency.

Is it possible to achieve this output with a single search, or do I have to create a new panel for each severity?

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.


Introducing Unified TDIR with the New Enterprise Security 8.2

Read the blog
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...