Splunk® IT Service Intelligence

Service Insights Manual

Define default properties for glass tables in ITSI

The defaults section of a glass table in IT Service Intelligence (ITSI) defines default properties for various glass table elements.

  • In the defaults section of the glass table definition at a global level for all visualizations or all data sources.

Set global defaults

The following code snippet from the defaults section uses the global field to set refresh and refreshType settings for all data sources.

"defaults": {
    "dataSources": {
      "global": {
        "options": {
          "refresh": "1m",
          "refreshType": "delay"

Sample options for the defaults section

Set properties in the dataSource or visualizations stanzas under either global or specify individual visualization types or data source types. Following the JSON format, each setting must be enclosed in quotes unless it is a boolean value or a number. Options other than the last one set must end in a comma.

option type default description
refresh string N/A Specify the refresh interval with a time expression. For example, "5s" for five seconds or "1m" for one minute.
refreshType (delay | interval) delay Indicate the starting time for a search to refresh. Use "delay" to start the countdown to refresh when the search is done. Use "interval" to count down when the search is dispatched.
queryParameters.earliest string N/A Specify the earliest time to search for events. Choose from year (y), month (m), week (w), day (d), minute, (m), or second (s), or 0 for all time.
queryParameters.latest string N/A Specify the latest time to search for events. Choose from year (y), month (m), week (w), day (d), minute, (m), or second (s), or 0 for all time.
queryParameters.timezone string User's timezone Set the timezone for the search parameters to run in.
Last modified on 28 April, 2023
Add inputs and tokens to glass tables in ITSI   Source options reference for the glass table editor in ITSI

This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1, 4.19.0

Was this topic useful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters