Skip to main content
Knowledge Object Overview App for Splunk app icon

Knowledge Object Overview App for Splunk

This app provides a knowledge object (KO) usage overview. The app highlights KO usage, what is being used and what is no longer used. Splunk admins can review what KO are used, how often and the resource consumption over time. The app currently focuses on Dashboards and Reports/Alerts but also shows details for lookups and macros.Built by Splunk Works
splunk product badge

Default Version 1.2.3

January 30, 2026

Compatibility

Splunk Enterprise

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1

Rating
3
(8)

Log in to rate this app

Support
Not Supported

This app provides a knowledge object (KO) usage overview. The app highlights KO usage, what is being used and what is no longer used. Splunk admins can review what KO are used, how often and the resource consumption over time. The app currently focuses on Dashboards and Reports/Alerts but also shows details for lookups and macros. In addition, the app allows admin to review KO change actions for audit purposes. Key features: * Overview of Dashboard, Reports, Lookups and Macro usage. Highlighting both active and inactive assets. * Reporting of all change actions to KOs by users, based on the audit index. * Reporting of Dashboard executions and resource consumption to identify resource hungry dashboard and analyse cause. * Reporting of Report executions and resource consumption to identify resource hungry dashboard and analyse cause. * Dashboard and Report view statistics over time. Identify the most active KOs who they are used by.