Splunk App for Infrastructure

[pietertruter1]

I have installed V2.02 of the app and configured manual performance metrics inputs to Windows hosts with UF already installed. Problem is that the Overview dashboard panels are not working. | inputlookup em_entities is returning results for my hosts, but I notice that the metric_name fields are all small caps and the dashboard searches are looking for metric_names that is not all small caps: avg(Processor.%_Privileged_Time). If I change the metric names in the search to all small caps the searches run without issues.
If I read the metrics index documentation it states that you can only use small caps in the metric names.

Am I missing something when creating the manual inputs? Field alias also does not seem to be working either and I also cant find where to edit the dashboards to change the metric names.

Any suggestions welcome? Short from recreating all the dashboards to my own Im out of ideas.

Thanks
Pieter

[pietertruter1]

So we are on 7.3.3 on the Search head, but our indexers are still on 7.1.* which we are planning to upgrade soon.

Thanks for the quick answer. Will test again after our indexers are upgraded as well.

[dagarwal_splunk]

Yeah.. your indexers are the problem.. It needs to be 7.2 or higher.

[dagarwal_splunk]

Are you using Splunk version 7.1.* for your SAI? If yes, please upgrade version to 7.2 or higher..