Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user

[emichels]

Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user?

[gcusello · Accepted solution]

Hi emichels,
did you explored eventtypes and tags (for simple searches) or macros (for complex searches)?

Anyway you could create a dashboard disabling drilldown to the search dashboard, in this way users will not see complexity of searches.

Bye.
Giuseppe

[emichels]

Event type does the trick. THANK YOU!