https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426364#M122129 <P>How to correlate events in ITSI ? New to Splunk ITSI </P> <P>Example CPU and DB alerts collection based on CI match .</P> <P>Currently using the sandbox - trail . </P> Wed, 04 Jul 2018 11:02:05 GMT anurag0011 2018-07-04T11:02:05Z https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426364#M122129 <P>How to correlate events in ITSI ? New to Splunk ITSI </P> <P>Example CPU and DB alerts collection based on CI match .</P> <P>Currently using the sandbox - trail . </P> Wed, 04 Jul 2018 11:02:05 GMT https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426364#M122129 anurag0011 2018-07-04T11:02:05Z https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426365#M122130 <P>Take a look at Correlation searches: <A href="http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createcorrelationsearch">http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createcorrelationsearch</A></P> <P>Or Multi-KPI alerts: <A href="http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createmulti-KPIalerts">http://docs.splunk.com/Documentation/ITSI/3.1.2/User/Createmulti-KPIalerts</A></P> Thu, 05 Jul 2018 14:26:38 GMT https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426365#M122130 kmorris_splunk 2018-07-05T14:26:38Z https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426366#M122131 <P>Thank you <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span> </P> Fri, 06 Jul 2018 04:39:05 GMT https://community.splunk.com/t5/Splunk-Search/How-to-correlate-events-in-ITSI/m-p/426366#M122131 anurag0011 2018-07-06T04:39:05Z