The example dashboards process Collection Services files and message queue messages to populate search results and visualizations. This data can be stored in one or more Splunk indexes.
Refer to the Ironstream Integration Components Administration Guide for details on how to configure Ironstream to allow a Splunk index to be populated with these data types.
The Starter Pack’s Documentation menu includes a link to an Ironstream Configuration Settings Dashboard, which provides descriptions of the Collection Services files used by the dashboards and information on how to populate the Critical Messages dashboard.