The following are the spec and example files for
# This file contains attributes and values for configuring the # default selected fields for the similar episodes pane in # Episode Review # # There is an itsi_event_management.conf in $SPLUNK_HOME/etc/apps/SA-ITOA/default/. # To set custom configurations, place an itsi_event_management.conf in # $SPLUNK_HOME/etc/apps/SA-ITOA/local/. You must restart Splunk to enable # configurations. # # To learn more about configuration files (including precedence) please see # the documentation located at # http://docs.splunk.com/Documentation/ITSI/latest/Configure/ListofITSIconfigurationfiles
# Use the [default] stanza to define any global settings. # * You can also define global settings outside of any stanza, at the top # of the file. # * Each .conf file should have at most one default stanza. If there are # multiple default stanzas, attributes are combined. In the case of # multiple definitions of the same attribute, the last definition in the # file wins. # * If an attribute is defined at both the global level and in a specific # stanza, the value in the specific stanza takes precedence.
* A setting that you want to enable for Episode Review. * Supported settings (stanzas) are 'similar_episodes' and 'common_fields' default_fields = [<comma-seperated list>] * Field for 'similar_episodes' stanza * The list of field names selected by default in Similar Episodes pane * For example, ["title","description","host"] * Default: ["title"] number_of_fields = [<number or 'all'>] * Field for 'common_fields' stanza * Number of common fields to display on the Common Fields pane * It could either be a number or the word 'all' to display all common fields * For example, "50" to display 50 common fields or "all" to display all common fields * Default: 50
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.5.0 Cloud only