create_kvstore_collection
Create a KV Store collection in a Splunk app for storing lookup tables or persisted configuration. Define fields, accelerate queries, and set replication.
Instructions
Create a KV Store collection with optional fields and indexing. Use this to provision a new collection for lookups or persisted configuration in a specific app.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | Yes | Target Splunk application where the collection will be created. Examples: - 'search': Default search app - 'my_app': Custom application - 'splunk_monitoring_console': Monitoring console app | |
| collection | Yes | Name for the new collection (alphanumeric and underscores only). Examples: - 'users': User information store - 'configurations': Application settings - 'lookup_table': Data enrichment table | |
| fields | No | Field definitions specifying data types and constraints | |
| accelerated_fields | No | Index definitions for faster queries | |
| replicated | No | Whether to replicate across cluster (default: True) | |
| create_lookup_definition | No | Also create a transforms.conf lookup definition (default: False) |