Splunk® App for Chargeback

Use the Splunk App for Chargeback

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Release notes for Splunk App for Chargeback

Version 1.1.53 of the Splunk App for Chargeback includes the following new features:

  • SVC Forecasting by index is now available in the "4. Forecasting" dashboard under "1. Splunk Cloud Forecasting" tab. Expand panel 4 to start using it.
  • A new macro called chargeback_biz_org can now be used to enter the organization name. From the home dashboard open the App Setup Screen, click on "3. Global Settings". Update the value as shown in the following image:

This image shows the welcome screen for the Splunk App for Chargeback

Version 1.1.52

  • This release includes a new Business Division field called: "biz_division". The field is optional and available in all the 8 Enrichment principles and elsewhere. It is important to run the Chargeback App Lookup Backup Job once manually to implement this new field. The field if empty will assume the value of biz_unit. This step is important, so you don't experience this error message: "Error in 'lookup' command: Cannot find the destination field", after running the job, allow 10 minutes for the bundle replication to occur.
  • New detailed explanation was added in the configuration chapter under the "Setup entitlement and B-Unit allocation tables" heading. To access the table, click on "5. Enrichment Tables" and open the panel "1. Splunk Entitlements Table Management".
  • You can now split usage by app. A new perc_ownership field can now be used to accomplish that. Here is an example of how to use it:

If you would like to split usage originating from the search app into 5 business units, click on "5. Enrichment Tables", then open "2. Business Units / Departments Enrichment Priority Logic - Foundation Tables" and then click the gear icon under "4. App 2 B-Unit Table" to open the App 2 B-Unit table and create 5 rows using this example and allocate the % ownership for each business unit totaling to exactly 100%:

host_name app_name biz_unit biz_division biz_dep perc_ownership
search bunit1 bunit1 bunit1 dep1 20
search bunit2 bunit2 bunit2 dep2 20
search bunit3 bunit3 bunit3 dep3 20
search bunit4 bunit4 bunit4 dep4 20
search bunit5 bunit5 bunit5 dep5 20
Last modified on 14 October, 2022
  NEXT
Overview of Splunk App for Chargeback

This documentation applies to the following versions of Splunk® App for Chargeback: current


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters