Back to the Blog

Moving? Don’t leave anything behind...

Posted by Rupak Pandya on Tuesday, May 10, 2016 - 11:51 Operational Intelligence Knowledge Objects, Splunk 6.3, Splunk 6.x, REST API, Lookups, macros, saved searches, event types, data models
My client was creeping up on their massive Splunk infrastructure migration to all new hardware and they wanted a quick and simple way to be sure that the knowledge objects in their environment were migrated successfully and nothing important was left behind. 
 
I suggested a solution that would utilize the various REST API searches that are available to gather this information and present it in a simple way.
 
We came up with a list of the knowledge objects and other important items they had in their environment. We ended up starting with the...
read more

Be Nice To Your Users ... And Your Lookups!

Posted by Naveed Krabbe on Wednesday, March 9, 2016 - 10:08 Cool Tools, Operational Intelligence Splunk, Lookups, editor, User Friendly

Introduction 

In today's blog I will describe a method that we recently used at a customer site in order to solve a problem for a portion of their Splunk user base. This group does consist of frequent and avid users of Splunk, however they have a fairly low permission level and for the most part, are not the most tech-savvy. Their use of Splunk is limited to only one app and the pre-built dashboards within it. 

The requirement for this user group was as follows: They wanted a lookup table where they could enter some notes for specific product ids. They also wanted this...

read more
Stay In Touch