Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Data storage in Splunk

Configure and retrieve Key-Value store lookups used by TISC during its integration with Splunk.

LookupDescription
tisc_kv_store
Name of the KV store where the data resides.
tisc_store_lookup
Name of the KV lookup to be used for searching the incoming records.
inputs_metadata_lookup
KV lookup that stores the status of recent executions for each configured input. Each record captures the configuration name, input name, last successful execution time, status, status message, and historical fetch date. Use this lookup to verify whether an input is running on schedule and to diagnose failures.
inputlookup <tisc_store_lookup>" example : | inputlookup tisc_store_lookup
Query to lookup records in the KV store.

Parent Topic:TISC add-on for Splunk overview