Add a war room filter for the main account tennant.
cancel
Showing results for 
Search instead for 
Did you mean: 

Add a war room filter for the main account tennant.

L1 Bithead

Hello all,

 

We're trying to edit the layout of an incident in the Main Account tennant in order to display output of splunk searches.

 

When adding the "War Room" section in the layout we're asked to select a war room filter from existing list (see below screenshot).

 

img01.PNG

 

But as we're on the main tennant we can't go to the playground war room and add a filter.

 

Here is the filter in the playground war room of an other tennant :

IMG002.PNG

 

So how can we add war room filter inside the Main Account tennant which doesn't have a playground ?

 

Thanks for reading.

 

Best regards,

Alexandre Borgo

1 ACCEPTED SOLUTION

Accepted Solutions

L1 Bithead

Alexandre Borgo

 

Thank you for reaching out, we do have a gap here, however what you can try is the following:

Create the layout in one of the tenants - this will allow you to create the filter in the tenant playground, and to use this filter in the layout builder

once the layout is ready, you can export it from the tenant and import it to the main account, and than sync it to the rest of the tenants

 

give it a go, and let us know if that works for you

 

Ori

View solution in original post

2 REPLIES 2

L1 Bithead

Alexandre Borgo

 

Thank you for reaching out, we do have a gap here, however what you can try is the following:

Create the layout in one of the tenants - this will allow you to create the filter in the tenant playground, and to use this filter in the layout builder

once the layout is ready, you can export it from the tenant and import it to the main account, and than sync it to the rest of the tenants

 

give it a go, and let us know if that works for you

 

Ori

View solution in original post

Hello Ori,

 

The solution worked well, thank you for the help.

 

Best regards

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!