Organize your assets and data into separate operations in Splunk IAI

As a Splunk Industrial Asset Intelligence (IAI) administrator, you can organize your assets, metrics, alerts, and views into separate operations. IAI users select a relevant operation before they take any action in Splunk IAI, such as browsing assets, reviewing alerts, or analyzing metrics. Defining separate operations allows you to give different groups of users the ability to focus on the data that is relevant to them.

At least one operation is required. You can have up to 20 operations.

Create multiple operations to achieve the following goals:

• Separate data that you do not need to use together into distinct operations to achieve faster performance when browsing metrics and asset hierarchies within each operation.
• Create unique operations for each location in your organization, and then create an overview operation to monitor key metrics from across those locations.
• If your Splunk Enterprise administrator sets up role-based access to your indexes, you can set up your operations and asset hierarchies to match those divisions. For example, you can create an operation called "Europe" and link an asset hierarchy that models your assets in your European region. When you associate data to that asset hierarchy, associate data only from the index or indexes that contain data from your European region. Your Splunk Enterprise administrator can limit access to those indexes to only the people in your organization who need to work with data from your European region.
• Create a temporary operation for specific troubleshooting or problem-solving purposes. For example, you might create an operation with two asset hierarchies from different plants that you would not normally monitor together so that you can analyze the behavior of comparable metrics from those different plants.

Create an operation

1. Log in to Splunk Web and access Splunk Industrial Asset Intelligence.
2. Click the Configure gear icon.
3. Click the Operations tab.
4. Click Add.
5. Enter a Name and an optional Description.
6. Click Add.

Edit an operation

To edit the name or description of an operation:

1. Click the Configure gear icon.
2. Click the Operations tab.
3. Click ... > Rename under the Actions column.
4. Make changes, then click Save.

To manage which asset hierarchies are linked with an operation, see Link your asset hierarchies with operations in Splunk IAI.

Delete an operation

As an IAI administrator, you can delete operations.

Deleting an operation is irreversible. If you delete an operation that is in use, deleting the operation also deletes all calculated metrics, groups, alerts, and monitor views in that operation.

To delete an operation:

1. Click the Configure gear icon.
2. Click the Operations tab.
3. Click the name of the operation you want to delete.
4. Click Delete in the upper-right corner of the page.
5. Check the box to confirm that you understand the consequences of deleting the operation.
6. Click Delete.