https://community.splunk.com/t5/Splunk-ITSI/ITSI-and-weekly-monthly-KPI/m-p/401300#M856 <P>As KPI are summary searches, there are no use cases for reporting on pooling of more than 24h.</P> <P>if you want to report on data from a larger timerange, you could precalculate it using another scheduled search, and summarize the results (or use a lookup), then carve a custom KPI to retrieve it, and add fake _time fields.</P> Thu, 24 Oct 2019 00:53:49 GMT yannK 2019-10-24T00:53:49Z https://community.splunk.com/t5/Splunk-ITSI/ITSI-and-weekly-monthly-KPI/m-p/401299#M855 <P>Hello,</P> <P>I'm currently using ITSI to monitor some services from which the KPI are calculated over small time window (15 minutes by default). I see that the calculation window of the KPI base search creation tool do not have any option than 24 hours.</P> <P>I would like to know if it is possible to have a KPI calculated over a bigger time window (eg, a week or a month). I have the feeling that that is not the purpose of ITSI, but I'm curious. </P> <P>Thank you.</P> Tue, 19 Feb 2019 10:02:54 GMT https://community.splunk.com/t5/Splunk-ITSI/ITSI-and-weekly-monthly-KPI/m-p/401299#M855 jwillaime 2019-02-19T10:02:54Z https://community.splunk.com/t5/Splunk-ITSI/ITSI-and-weekly-monthly-KPI/m-p/401300#M856 <P>As KPI are summary searches, there are no use cases for reporting on pooling of more than 24h.</P> <P>if you want to report on data from a larger timerange, you could precalculate it using another scheduled search, and summarize the results (or use a lookup), then carve a custom KPI to retrieve it, and add fake _time fields.</P> Thu, 24 Oct 2019 00:53:49 GMT https://community.splunk.com/t5/Splunk-ITSI/ITSI-and-weekly-monthly-KPI/m-p/401300#M856 yannK 2019-10-24T00:53:49Z