About georget

georget · ‎04-22-2015

I realized that if you edit savedsearches.conf and change the value of the "action.keyindicator.drilldown_uri" property of the Key Indicator search, you can specify whatever URL you want. For some reason this does not work through the Key Indicator Form in the web UI.

georget · ‎04-19-2015

Thanks, but It does not work. The Key Indicator Search complains about not using a valid path. I'd like to attach a snapshot from the form where the Key Indicator Search is defined, but I am not allowed. Once I set a CDATA value in the "Drilldown URL" fields of this custom search form, I get the message: Defines the view to redirect users to when they click the key indicator. Must be a valid path. The form the new Key Indicator's search is defined in, is in the Custom Searches page of the ES app. There is no custom dashboard. The new Key Indicator is attached to the top panel (with the rest of the indicators) of the Security Posture dashboard of the ES app.

georget · ‎04-16-2015

Hi, I've created a new Key Security Indicator for my app and have integrated it in the Security Posture dashboard of the Splunk App for Enterprise Security. I'd like the drilldown url to point to one of the dashboards of my custom app. If I try to add a URL path with slashes in the Key Indicator Search form, it is not accepted. So is it possible to reference my dashboard from the indicator? Thanks.

Posts	3
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎04-16-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

After integrating a new Key Security Indicator in ...

Re: After integrating a new Key Security Indicator...

Re: After integrating a new Key Security Indicator...

After integrating a new Key Security Indicator in ...