Splunk Enterprise

How do I create custom search & reporting app for new Teams to keep their searches separate & better organized? Thx

SamHTexas
Builder

In my large environment we have Splunk Ent. ES in a clustered environment. We are on-boarding new teams into our Splunk environment. To avoid housing all the new team's search content under the default search & reporting, how does one create a separate search & reporting so the new team don't have to deal with all the search & reporting spinning on the default one. Thanks a million for your help in advance.

 

Labels (2)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Go to the Manage Apps page and click the button to create a new app.  Call it "Team A" and tell team A to use this app for all of their searching, reports, etc.  Repeat the process for Team B and all other teams.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...