Splunk® Business Flow (Legacy)

User Manual

Splunk Business Flow is no longer available for purchase as of June 20, 2020. Customers who have already purchased Business Flow will continue to have support and maintenance per standard support terms for the remainder of contractual commitments.

Save and manage your Flow

After you explore your data, save your analyses and filters as a Flow. A Flow is a saved view of the analyses and filter settings you applied to the Flow Model in the Explorer. You can create multiple Flows from the same Flow Model. When you make a change to a Flow Model, the changes propagate to related Flows. Saving your work as a Flow enables users who do not have knowledge of SPL to interact with and Explore the data.

Set the visibility of your Flow Model

When you create a Flow Model you set your Flow Model type to Private or Shared. Setting a Flow Model type to Shared enables the ability to save and share Flows with users in your organization. Shared Flow Models count toward the Flow Model limit listed in your Splunk Business Flow license. Set Flow Models to Private for testing and development. Private Flow Models do not count toward the Flow Model usage. You cannot create Flows from a Private Flow Model. If you set a Flow Model to Private after you create Flows, you cannot access the saved Flows.

Prerequisite
In order to change the visibility of a Flow Model, you must be an admin or a member of the sbf_modeler role, or you must have the sbf_set_visibility_flow_model capability.The sbf_set_visibility_flow_model capability allows users to set the visibility of a Flow Model from Shared to Private and the reverse. You can explore a Private Flow Model, but you cannot save your work as a Flow. If you set a Flow Model to Private after you create Flows, you cannot see the Flows.

Steps

  1. In SBF, click the gear icon to open the Configuration page.
  2. Click the Flow Models tab.
    • To set a Flow Model to Private, select Private under visibility.
    • To set a Flow Model to Shared, select Shared under visibility.

Save a Flow

After you explore your Flow Model, you can save your work as a Flow and save Filter Sets.

To save a Flow, set the Flow Model to Shared.

  1. In the Explorer, click Save as Flow.
  2. Enter a name.
  3. (Optional) Enter a description.
  4. Click Save.

Clone a Flow

Follow these steps to clone a Flow. A cloned Flow is a duplicate of the original.

  1. From the Flow home page, click Edit on the Flow you want to clone.
  2. Click Manage.
  3. Click Clone.
  4. Type a name in the Name box.
  5. (Optional) Enter a description.
  6. Click the Clone button.

Delete a Flow

Follow these steps to delete a Flow.

  1. From the Flow home page, click Edit on the Flow you want to delete.
  2. Click Manage.
  3. Click Delete.

Enable High Contrast Mode

If you want to present your Flowchart, enable High Contrast Mode in the Configuration page. High Contrast Mode increases the contrast and saturation of colors displayed in the Flowchart to account for projectors or monitors with poor color resolution.

  1. Click the gear icon to open the Configuration page.
  2. Click Settings.
  3. Toggle the High Contrast Mode to enable or disable High Contrast Mode.
Last modified on 18 March, 2020
What is a Flow?   Edit a Flow

This documentation applies to the following versions of Splunk® Business Flow (Legacy): -Latest-


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters