Dashboards & Visualizations

Show results in Grafana from app other than "Search & Reporting" app

mukeshchandak
Engager

I have an Splunk app named "E-Bark", when I run a query in search bar in this app I can see the results but not when I run that same query in "Search & Reporting". 

I want to visualize the results in Grafana but Grafana is fetching data from indices corresponding to "Search & Reporting" only.

Do I need to make any change to the search query?

Labels (4)
0 Karma

s2_splunk
Splunk Employee
Splunk Employee

Sounds to me as if some knowledge objects are scoped to only be visible in your E-Bark app. You can either change  visibility for the required knowledge objects to be Global vs. app-only, or you can execute searches using REST using your app's context vs. the S&R app context. Not sure how the Grafana integration works. 

0 Karma

mukeshchandak
Engager

@s2_splunk Thanks for helping me with the approach. Can you pls let me know how can the scope of certain indices be changed to Global from app-only.

0 Karma

s2_splunk
Splunk Employee
Splunk Employee

I recommend you start here.

One thing to note: indexes are not knowledge objects. Access to indexes is configured in role settings. And then there are app permissions as well that may limit what you can and cannot do. 

Maybe I am misunderstanding the issue you are having completely. 

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...