https://community.splunk.com/t5/Splunk-ITSI/ITSI-integration-with-Scom-Problem-with-KPI/m-p/466749#M1687 <P>Hello,</P> <P>I'm trying to build KPI for objects from MS SCOM. I'm using standard scom add-on to get information about objects and events from SCOM. I have created one field "kpi_value" which gives me current status of certain object. Directly from the search all work ok but ITSI cannot see these values. I have some suspicions: I'm checking this field every 5 minutes but in direct search i see that if there is no incidents i have updates each 4 hours. I have option "Fill gaps in data with the last available value of data." but looks like this option cannot help here.</P> Sun, 07 Jun 2020 00:22:32 GMT pedro_77 2020-06-07T00:22:32Z https://community.splunk.com/t5/Splunk-ITSI/ITSI-integration-with-Scom-Problem-with-KPI/m-p/466749#M1687 <P>Hello,</P> <P>I'm trying to build KPI for objects from MS SCOM. I'm using standard scom add-on to get information about objects and events from SCOM. I have created one field "kpi_value" which gives me current status of certain object. Directly from the search all work ok but ITSI cannot see these values. I have some suspicions: I'm checking this field every 5 minutes but in direct search i see that if there is no incidents i have updates each 4 hours. I have option "Fill gaps in data with the last available value of data." but looks like this option cannot help here.</P> Sun, 07 Jun 2020 00:22:32 GMT https://community.splunk.com/t5/Splunk-ITSI/ITSI-integration-with-Scom-Problem-with-KPI/m-p/466749#M1687 pedro_77 2020-06-07T00:22:32Z