topic Re: ITSI deleting dependent service leaves blank node on Service Analyser in Splunk ITSI

ITSI deleting dependent service leaves blank node on Service Analyser

ewan000 — Thu, 14 Feb 2019 14:49:30 GMT

I created (via csv import) and then deleted (via Configure Services UI) a bunch of services which were dependent services of other services.

The expected behaviour for me was that this would remove the nodes from the Service Analyzer diagram.

However, I am left with a blank node to joining the services which depended on the deleted service.

Is this a bug? How can i get rid of the blank node?

we are on ITSI 4.1.1 Splunk Enterprise 7.1.3

got some erros in the log, not sure if they are related

[itsi.consumer] [init] [exception] [48538] Saved search "Indicator - ecd48ed9-7874-4650-a885-36ff77817683 - ITSI Search" was not found, ignoring delete

Re: ITSI deleting dependent service leaves blank node on Service Analyser

chrisyounger — Thu, 14 Feb 2019 19:09:02 GMT

This seems like a bug in your version. What version are you running? I just replicated your steps in my ITSI 4.0 environment and it didn't leave behind the unlabeled service.

Re: ITSI deleting dependent service leaves blank node on Service Analyser

ewan000 — Wed, 20 Feb 2019 14:16:09 GMT

we are on itsi 4.1.1 it seems to be related to mass deletes, im deleting 100's of services

Re: ITSI deleting dependent service leaves blank node on Service Analyser

ewan000 — Mon, 25 Mar 2019 15:42:54 GMT

see: https://answers.splunk.com/answers/687634/splunk-it-service-intelligence-itsi-after-removing.html