It lists each tag once, even if the tag appears in multiple apps or is associated with multiple field-value pairs. The List by tag name page lists each of the tags that are in your Splunk platform deployment. Managing associations between tags and sets of field-value pairs See Manage knowledge objects through Settings pages. This practice aids with data normalization, and can reduce confusion on the part of your users. If you disable the association between the field-value pair and the two tags in the Search & Reporting app, the field-value pair will continue to be associated with the tag-a and tag-b in the ES app.Īs a knowledge manager, consider using a carefully designed and maintained set of tags. This means you can apply a change to the association between a field-value pair and a set of tags in one app without affecting field-value pairs or tags in other apps.įor example, say you have the same field-value pair in the Search & Reporting and Enterprise Security apps, and in both apps it is associated with the same two tags: tag-a and tag-b. If you have the same field-value pair in multiple apps, it appears on multiple rows of the List by field-value pair page. The List by field-value pair page breaks out field-value pairs by app. Clone, Move, or Delete an association between a field-value pair and a set of tags.If you need to remove tags from your search results without deleting them, disable them instead. Disable all tags associated with a field-value pair.The Splunk platform applies field-value pair permission updates to all tags associated with the pair. Update permissions for a field-value pair.Click a field-value pair name and add or remove tag names. Edit the list of tags that are associated with a field-value pair.Click New to provide a field-value pair and one or more tag names. On this page you can perform the following actions if the permissions associated with your role allow it: The List by field-value pair page lists the field-value pairs that are associated with tag sets. Managing associations between field-value pairs and tag sets The Splunk platform does not perform validation to ensure that you are not associating tags to nonexistent field-value pairs. Use these pages to create, edit, or delete tags, and manage the sets of tags that are associated with specific field-value pairs or apps.īefore you create new field-value pair records on the Settings pages for tags, verify that the field-value pairs exist in your data. Each view is a different tag organization. The Tags page in Settings gives you three views of your tags. Manage tags for your Splunk deployment.Use the Tags page in Settings to manage the tags created by users of your Splunk deployment. See Tag and alias field values in Search. Most users use the simplest method tagging field-value pairs directly in search results. Splunk software provides multiple methods for tag creation and management.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |