TrackMe Logo

Quickstart

  • QUICK START - Starting with TrackMe: (feed tracking quickstart)

License, terms & conditions, support

  • EULA License
  • Terms & Conditions
  • Support

Compatibility & Download

  • Compatibility
  • Download

Requirements

  • Requirements for TrackMe

Installation

  • Installation
  • Upgrading TrackMe
  • Migrate from TrackMe V1 to TrackMe V2
  • Migrating and Cloning TrackMe
  • License registration

Administration guide

  • Configuration
  • TrackMe theme for Tabulator
  • Large Scale Environment and Best Practices Configuration Guide
  • Creating Virtual Tenants
  • Manage Virtual Tenants
  • Operational status Virtual Tenants
  • Scheduling Virtual Tenants
  • Personal user profile for Virtual tenants
  • Splunk remote deployments (splunkremotesearch)
  • Role Based Access Control and ownership
  • Alerting Architecture & Third Parties Integration
  • Priority Management
  • Outliers Anomaly Detection
  • TrackMe Data Sampling - Events and format recognition for quality inspection in TrackMe
  • TrackMe sourcetypes & metrics
  • TrackMe REST API
  • splk-feeds - Creating and managing Hybrid Trackers
  • Workload (splk-wlk) - Manage Workload tenants and trackers
  • splk-flx - Creating and managing Flex Trackers
  • splk-cim - Creating and managing CIM Trackers
  • TrackMe Tags enrichment
  • Feeds (DataSource - splk-dsm) - Docs notes & links
    • Introduction to documentation notes & links for splk-dsm
    • Where to find the documentation notes & links in TrackMe UI
    • Defining global documentation notes & links
    • Defining documentation notes & links per entity
    • REST API endpoints
  • Tracking Expected hosts
  • CMDB Lookup Integration
  • Elastic sources for feeds tracking
  • TrackMe CI/CD management (TCM)
  • Maintenance mode & knowledge database
  • TrackMe App on SOAR: Automate and interact with TrackMe from Splunk SOAR

White papers

  • TrackMe’s White Papers
  • Running a TrackMe Proof of Concept
  • QUICK START - Starting with TrackMe: (feed tracking quickstart)
  • Use TrackMe to detect abnormal events count drop in Splunk feeds
  • Analyse log messages logging level to detect behaviour anomalies using TrackMe’s Flex Object and Machine Learning Anomaly Detection
  • Tracking Splunk Cloud SVC consumption in TrackMe
  • Monitor Splunk Workload with TrackMe’s Workload component
  • Monitor Splunk Indexers Clusters
  • Monitor Splunk Search Head Clusters
  • Backing up and Restoring TrackMe
  • Auto deletion or management of TrackMe entities
  • Performing mass operations in TrackMe
  • Using SLA alerting to build a 2-tier monitoring system

User guide

  • Entities priority
  • Entity Monitoring State
  • Status Message
  • Status Flipping Feature
  • Notable Events
  • Acknowledgments
  • Splunk Feeds KPIs (splk-feeds)
  • Splunk Feeds Thresholds (Delay and Latency, Machine Learning adaptive thresholding)
  • Splunk Feeds Delayed & Inactive Entities (splk-feeds)
  • Logical groups (entities ensemble association)
  • Splunk Workload (splk-wlk)
  • Splunk SOAR Cloud & on-premise monitoring and active actions in TrackMe
  • Cribl Logstream monitoring in TrackMe

Troubleshoot

  • Troubleshooting
  • Frequently asked questions (FAQ)

Versioning

  • Release notes

Various

  • Third-party components credits
TrackMe
  • Feeds (DataSource - splk-dsm) - Docs notes & links
  • View page source

Feeds (DataSource - splk-dsm) - Docs notes & links

Introduction to documentation notes & links for splk-dsm

Documentation notes & links

  • The documentation notes for splk-dsm is a simple feature which allows to provide easy to access documentation context directly in the TrackMe UI.

  • This feature is only available for the Data Source tracking component. (splk-dsm)

  • You can define global and default documentation notes and links, which apply for every entity in TrackMe.

  • In Addition, you can also define documentation notes and links for each entity separately or linked to multiple entities.

  • If both global documentation notes and entity specific documentation notes are defined, the entity specific documentation notes will be used.

Where to find the documentation notes & links in TrackMe UI

When you open the screen of a a specific entity, TrackMe shows as the top of the screen a link referring to documentation notes & link, depending on if a documentations notes have been defined yet: (global or per entity)

No documentation notes defined yet

screen001

Documentation notes defined

screen002

If documentation notes are defined, the content would appear as:

screen003

If documentation notes are not defined yet, the following screen shows up and allows to create a new documentation reference, or link to an existing documentation reference:

screen004

Defining global documentation notes & links

To define global documentation notes & links, you need to navigate to the “Configure” screen and select the “splk-general” tab:

screen005 screen006

Example:

screen007 screen008

Note that the documentation notes & links defined globally can be overridden on per entity basis, so you can still reference specific documentation notes & links for each entity.

Before TrackMe 2.0.87

  • Before this release of TrackMe, the global configuration was made in several Splunk macros (trackme_identity_card_default_url, trackme_identity_card_default_note)

  • If you were using this feature before this version, please backport your configuration to the new global configuration screen.

Defining documentation notes & links per entity

If a global documentation reference is defined, TrackMe shows an informational message and allows defining an entity specific documentation reference, or link to an existing one:

screen009

If a specific entity note was defined however, the screen will allow deleting or updating this reference:

screen010

REST API endpoints

Identity cards are managed via read only and write REST API endpoints, consult the REST API Dashboard in TrackMe for the detailed usage and example:

API resource groups:

  • splk_identity_cards: read only endpoints (trackmeuseroperations capability)

  • splk_identity_cards/write: write endpoints (trackmepoweroperations capability)

screen011
Previous Next

© Copyright © Copyright. 2022 - 2025. TrackMe Limited. All rights reserved. TRACKME® is a registered trade mark of TrackMe Limited, in both word and logo form. Any unauthorised use or reproduction of these marks is strictly prohibited and may result in legal action..

Built with Sphinx using a theme provided by Read the Docs.