itsi_event_management.conf

The following are the spec and example files for itsi_event_management.conf.

itsi_event_management.conf.spec

# This file contains attributes and values for configuring the
# default selected fields for the similar episodes pane in
# Episode Review
#
# There is an itsi_event_management.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/default/.
# To set custom configurations, place an itsi_event_management.conf in
# $SPLUNK_HOME/etc/apps/SA-ITOA/local/. You must restart Splunk to enable
# configurations.
#
# To learn more about configuration files (including precedence) please see
# the documentation located at
# http://docs.splunk.com/Documentation/ITSI/latest/Configure/ListofITSIconfigurationfiles

GLOBAL SETTINGS

# Use the [default] stanza to define any global settings.
#  * You can also define global settings outside of any stanza, at the top
#    of the file.
#  * Each .conf file should have at most one default stanza. If there are
#    multiple default stanzas, attributes are combined. In the case of
#    multiple definitions of the same attribute, the last definition in the
#    file wins.
#  * If an attribute is defined at both the global level and in a specific
#    stanza, the value in the specific stanza takes precedence.

[<stanza_name>]

* A setting that you want to enable for Episode Review.
* Supported settings (stanzas) are 'similar_episodes' and 'common_fields'

default_fields = [<comma-seperated list>]
* Field for 'similar_episodes' stanza
* The list of field names selected by default in Similar Episodes pane
* For example, ["title","description","host"]
* Default: ["title"]

number_of_fields = [<number or 'all'>]
* Field for 'common_fields' stanza
* Number of common fields to display on the Common Fields pane
* It could either be a number or the word 'all' to display all common fields
* For example, "50" to display 50 common fields or "all" to display all common fields
* Default: 50

itsi_event_management.conf.example

No example