Splunk Search

Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user

emichels
Loves-to-Learn

Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user?

Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi emichels,
did you explored eventtypes and tags (for simple searches) or macros (for complex searches)?

Anyway you could create a dashboard disabling drilldown to the search dashboard, in this way users will not see complexity of searches.

Bye.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi emichels,
did you explored eventtypes and tags (for simple searches) or macros (for complex searches)?

Anyway you could create a dashboard disabling drilldown to the search dashboard, in this way users will not see complexity of searches.

Bye.
Giuseppe

0 Karma

emichels
Loves-to-Learn

Event type does the trick. THANK YOU!

0 Karma
Get Updates on the Splunk Community!

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...

Splunk Classroom Chronicles: Training Tales and Testimonials

Welcome to the "Splunk Classroom Chronicles" series, created to help curious, career-minded learners get ...

Access Tokens Page - New & Improved

Splunk Observability Cloud recently launched an improved design for the access tokens page for better ...