• What Are Reference Designs?

    Kinney Group’s Reference Designs are documents created by KGI engineers to communicate the essential aspects of a technological system. The Reference Design enables the reader to adopt and adapt that system. It includes an overview, design details, and results of the solution.  Three Powerful Benefits of Modernizing your Splunk Environment, from Kinney Group and…

  • What’s Included with Atlas Core?

    The core components of the Atlas platform are Data Management, Forwarder Awareness, Scheduler Assistant, and Search Library.  Data Management  The Data Management component allows users to request data, view an inventory of all data by sourcetype, and monitor the status of requests. For more information about Data Management, click here.   Forwarder Awareness  The Forwarder Awareness…

  • Overview of the Search Library

    Atlas’s Search Library component enables users to access a collection of searches, including detailed information about the SPL query, use case, and tags corresponding to each search.   The Search Library comes with several searches that the KGI team has found to be useful. The user also has the capability to create new searches to…

  • Filtering the Search Library

    Atlas’s Search Library component enables users to access a collection of searches, including detailed information about the SPL query, use case, and tags corresponding to each search.   Users may filter the Search Library to view certain searches by search type, category, sourcetype, CIM datamodel, and tags.   To filter by search type, select…

  • How to Launch a Search

    Opening the Search Library will display a list of searches by name and use case.   To launch a search, click the “Launch Search” button on the right of the search you wish to launch.  Launching a search will open a new tab.   From this tab, users can view the search result…

  • Understanding the Scheduler Assistant [BETA]

    The Scheduler Assistant app gives users and admins insights to the number and nature of searches taking place within their environment. It also includes a list of all scheduled searches.  The “Scheduler Activity” tab contains three dashboards: “SERVER CONCURRENCY & LIMITS,” “SCHEDULED SEARCHES,” and “HISTORICAL PERFORMANCE”.  “SERVER CONCURRENCY AND LIMITS” includes an explanation…

  • Using the Scheduler Assistant Cron Helper

    The Cron Helper is the second tab within Scheduler Assistant [BETA].   The software utility Cron is a time-based job scheduler. Users can set up searches to run in Splunk periodically at fixed dates, times, or intervals. Each digit in the expression denotes a specific value: minute, hour, day, month, and weekday. …

  • Viewing Search Details

    Opening the Search Library will display a list of searches by name and use case.  To view details beyond this basic display, click the arrow (>) to the left of the search’s name. This will expand the search and display details regarding SPL query, description, explanation, category, data model, sourcetype, and tags. 

  • Adding a New Search

    To create and save a custom search in the Atlas Search Library, click the “+” symbol on the right of the top banner labeled “Add New Search”.  This will open a “New Search” window.  In this window, enter a name for the search and a use case. These fields will…

  • Editing/Deleting a Saved Search

    Once a new custom search has been created, users can edit or delete it at any time. To do so, expand the search to view the details by clicking the arrow (>) to the left of the search name.   The “Edit Search” and “Delete Search” buttons can be found on the…