Content Pack for Example Glass Tables

Content Pack for Example Glass Tables

This documentation does not apply to the most recent version of Content Pack for Example Glass Tables. For documentation on the most recent version, go to the latest release.

Install and configure the Content Pack for Example Glass Tables

The Splunk App for Content Packs allows you to access content packs, preview their contents, and install them in your environment. The Splunk App for Content Packs includes the Content Pack for Example Glass Tables if you are using ITSI version 4.9.0 or higher. If you are using ITSI version 4.8.x or lower, then you have to install the content pack using backup and restore functionality provided by ITSI.

For a full list of glass tables shipped in this content pack, see About the the Content Pack for Example Glass Tables.

Prerequisites

  • Install and configure the IT Service Intelligence (ITSI) in your environment. See About Splunk ITSI in the Install and Upgrade Manual.
  • Take a full backup of your ITSI environment in case you need to uninstall the content pack later. See Create a full backup of ITSI.

Install the Content Pack for Example Glass Tables

You have two options for installing and configuring the Content pack for Example Glass Table;

  • One option is to install the content pack from the Splunk App for Content Packs. The Content Pack for Example Glass Table is included in the Splunk App for Content Packs if you are using ITSI version 4.9.x.
  • Your second option is to install the content pack using backup and restore functionality provided by ITSI. You have to use this option if you are using ITSI version 4.8.x or lower.

Install the content pack from the Splunk App for Content Packs

To install the Content Pack for Example Glass Table, you have to install the Splunk App for Content Packs. To install the Splunk App for Content Packs in your environment, see the Splunk App for Content Pack installation instructions.

The Content Pack for Example Glass Table contents are automatically installed and running once you install the Splunk App for Content Packs on the search head where you installed ITSI version 4.9.x.

After you install the Splunk App for Content Packs, follow these steps to configure the Content Pack for Example Glass Table:

  1. From the ITSI main navigation bar, click Configuration > Data Integrations.
  2. Select Add content packs or Add structure to your data depending on your version of ITSI.
  3. Select the Example Glass Table content pack.
  4. Review what's included in the content pack and click Proceed.
  5. Configure the content pack settings. Refer to the table that follows these steps for setting descriptions.
  6. When you've completed your selections, click Install selected.
  7. Click Install to confirm the installation. When the installation completes you can view all objects that were successfully installed in your environment. A green checkmark on the Data Integrations page shows any other content packs you have installed.

Refer to the following table for content pack setting option descriptions:

Content pack setting Description
Choose which objects to install For a first-time installation, select the items you want to install and deselect any you do not want to install.

For an upgrade installation, the installer identifies which objects from the latest version of the content pack are new and which objects are currently in your environment. You can choose which objects to install from the new version.

Choose a conflict resolution rule for the objects you install: Install as new For upgrades or subsequent installs, decide what happens to duplicate objects introduced from the content pack.

When you install as new, objects are installed and any existing identical objects in your environment remain intact.

Choose a conflict resolution rule for the objects you install: Replace existing For upgrades or subsequent installs, decide what happens to duplicate objects introduced from the content pack.

When you replace existing, any existing identical objects are replaced with those from the new installation. Any changes you previously made to these objects are overwritten.

Import as enabled Select whether to install objects as enabled or to leave them in their original state. Importing objects as disabled ensures your environment is not impacted from the addition of new content.

This setting only applies to services, correlation searches, and aggregation policies. All other objects such as KPI base searches and saved searches are installed in their original state regardless of the option you choose.

Add a prefix to new objects Optionally, append a custom prefix to each object installed from the content pack. For example, you can prefix your objects with CP- to indicate they came from a content pack. This option can help you locate and manage the objects after installation.
Backfill service KPIs Optionally backfill your ITSI environment with the previous seven days of KPI data. Enable backfill if you want to configure adaptive thresholding and predictive analytics for the new services.

This setting only applies to KPIs, not service health scores.

Install the content pack using backup and restore functionality provided by ITSI

If you are using ITSI version 4.8.x or lower, follow these steps to install the Content Pack for Example Glass Table. For instructions on restoring a backup, see Restore from a backup zip in the Administration Manual.

  1. Download the following ITSI backup file: Media: BACKUP-CP-GT-1.0.1.zip.
  2. On your ITSI search head, create a restore job and upload the backup file. Give the job the same name as the backup file you downloaded. For example, BACKUP-CP-GT-1.0.1
  3. After the restore job completes, confirm that the objects included in the content pack are restored to your environment. For a full list of glass tables shipped in this content pack, see About the the Content Pack for Example Glass Tables.

Configure glass tables

Review the installed glass tables and update their data sources to reflect your own data sources. All values in the glass table are hard-coded and must be updated with KPIs or ad-hoc searches to reflect data in real time.

  1. From the ITSI main menu, click Glass Tables.
  2. Open the glass table you want to update.
  3. Click Edit.
  4. Select one of the single value visualizations and update Data Source - primary to reflect your own KPI or Splunk data source.
  5. Optionally, make other additions and changes to the glass table.
  6. Click saveSave iconwhen you are finished.

For more information about editing glass tables, see Overview of the glass table editor in ITSI in the Service Insights manual.

Last modified on 09 March, 2022
Release notes for the Content Pack for Example Glass Tables   Glass table reference for the Content Pack for Example Glass Tables

This documentation applies to the following versions of Content Pack for Example Glass Tables: 1.0.1


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters