Splidgets - SearchFu! for Splunk

A Splidget is a Splunk component that, in my mind, is not quite an app but does provide functionality to the end user experience in Splunk. The idea here is that these "widgets" will provide new users ways to learn and work for efficiently within Splunk. Experienced users will also gain value. Splidgets were designed around very simplistic principles, using as simple a process as possible to provide value to Splunk users. This Splidget is a search repository for your Splunk toolbox. NOTE: WHEN UPDATING TO A NEWER VERSION OF THIS APP, YOUR SEARCHFU! LOOKUP FILE WILL BE OVERWRITTEN!! PLEASE BACK UP OR RENAME YOUR MASTER (spgt_searchfu.csv) LOOKUP FILE BEFORE YOU UPGRADE! (e.g. spgt_searchfu.last.csv) This file is located in etc/apps/spgt_searchfu/lookups directory. Once upgraded, delete the new spgt_searchfu.csv file and change the name of your good copy back to spgt_searchfu.csv OR manually copy and paste your backed up file back into the lookups directory. Look for the easter egg view, "Easy Triage".