Splunk Enterprise

In ES Investigations how to print timeline/notes

packetrider
Engager

When you print the summary of an investigation through ES it does not include notes.   Is there a way to add those?  Alternatively is there a way to use SPL to find those notes, artifacts, and events, to create a report from a custom dashboard?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...