Splunk Search

Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user

emichels
Loves-to-Learn

Is there something like a "sql database view" in splunk to hide the complexity of a search/report from the end user?

Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi emichels,
did you explored eventtypes and tags (for simple searches) or macros (for complex searches)?

Anyway you could create a dashboard disabling drilldown to the search dashboard, in this way users will not see complexity of searches.

Bye.
Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi emichels,
did you explored eventtypes and tags (for simple searches) or macros (for complex searches)?

Anyway you could create a dashboard disabling drilldown to the search dashboard, in this way users will not see complexity of searches.

Bye.
Giuseppe

0 Karma

emichels
Loves-to-Learn

Event type does the trick. THANK YOU!

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...

Secure Your Future: Mastering Upgrade Readiness for Splunk 10

Spotlight: The Splunk Health Assistant Add-On  The Splunk Health Assistant Add-On is your ultimate companion ...

Observability Unlocked: Kubernetes & Cloud Monitoring with Splunk IM

Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team on ...