https://community.splunk.com/t5/Getting-Data-In/What-s-wrong-with-my-ITSI-logic-monitoring-running-Process/m-p/346396#M63616 <P>I have a base search as such :</P> <PRE><CODE>index=windows host=specific_hosts* Type=Service Name=servicename | eval Service_Running=if(State="Running",1,0) every 5 mins last 5 mins split by ent = Y filter to entities in service entity lookup = host </CODE></PRE> <P>Then I have created a metric </P> <PRE><CODE>Title = Service Running Threshold Field = Service_Running Entity Calculation latest Service Calculation latest </CODE></PRE> <P>This gives me a 1 charting nicely in the Aggregate Threshold Values and I've set a threshold of 1 normal 0 critical</P> <P>However, I get N/A in the KPI's for all of these hosts?</P> <P>gratzi</P> Tue, 17 Apr 2018 05:06:03 GMT Skins 2018-04-17T05:06:03Z https://community.splunk.com/t5/Getting-Data-In/What-s-wrong-with-my-ITSI-logic-monitoring-running-Process/m-p/346396#M63616 <P>I have a base search as such :</P> <PRE><CODE>index=windows host=specific_hosts* Type=Service Name=servicename | eval Service_Running=if(State="Running",1,0) every 5 mins last 5 mins split by ent = Y filter to entities in service entity lookup = host </CODE></PRE> <P>Then I have created a metric </P> <PRE><CODE>Title = Service Running Threshold Field = Service_Running Entity Calculation latest Service Calculation latest </CODE></PRE> <P>This gives me a 1 charting nicely in the Aggregate Threshold Values and I've set a threshold of 1 normal 0 critical</P> <P>However, I get N/A in the KPI's for all of these hosts?</P> <P>gratzi</P> Tue, 17 Apr 2018 05:06:03 GMT https://community.splunk.com/t5/Getting-Data-In/What-s-wrong-with-my-ITSI-logic-monitoring-running-Process/m-p/346396#M63616 Skins 2018-04-17T05:06:03Z