The following are the spec and example files for
# This file contains attributes and values for configuring the # default selected fields for the similar episodes pane in # Episode Review # # There is an itsi_event_management.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/default/. # To set custom configurations, place an itsi_event_management.conf in # $SPLUNK_HOME/etc/apps/SA-ITOA/local/. You must restart Splunk to enable # configurations. # # To learn more about configuration files (including precedence) please see # the documentation located at # http://docs.splunk.com/Documentation/ITSI/latest/Configure/ListofITSIconfigurationfiles
# Use the [default] stanza to define any global settings. # * You can also define global settings outside of any stanza, at the top # of the file. # * Each .conf file should have at most one default stanza. If there are # multiple default stanzas, attributes are combined. In the case of # multiple definitions of the same attribute, the last definition in the # file wins. # * If an attribute is defined at both the global level and in a specific # stanza, the value in the specific stanza takes precedence.
* A setting that you want to enable for Episode Review. * Currently, 'similar_episodes' is the only supported setting. default_fields = [<comma-seperated list>] * The list of field names selected by default in Similar Episodes pane * For example, ["title","description","host"] * Default: ["title"]
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.4.1