Splunk Enterprise Security

Is it possible to manually add values to a dashboard panel?

nate_c
New Member

I am trying to count the number of events that I am unable to send to Splunk. I need these in a dashboard where I can just type them in when I get them.

For example, I have 13 events from yesterday and on my dashboard I want to just be able to add them to the current count. This way someone can still see the number of events even though I don't send them to Splunk. The only value I need is a number nothing else.

Is this possible to do, or am I completely crazy? Thank you!

0 Karma

PowerPacked
Builder

Hi @nate_c

you can add, update, delete data by working with a kvstore or lookup.

and you can use lookup commands like inputlookup, outputlookup, lookup to work with kvstore or lookup files & also show these data as panels in the dashboards.

go through this splunk doc, can be helpfull

http://dev.splunk.com/view/webframework-tutorials/SP-CAAAEZT

Thanks

0 Karma
Get Updates on the Splunk Community!

Splunk App for Anomaly Detection End of Life Announcment

Q: What is happening to the Splunk App for Anomaly Detection?A: Splunk is officially announcing the ...

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...