Splunk Enterprise

Why is ITSI event count in episodes updating even though the status is Closed?

manjunath_0208
Loves-to-Learn Everything

We have episodes creating service now tickets through a 3rd party interface. The episode status is changing when the status is changed in service now. But when the episode status is closed in splunk, new episode is not created. Instead events are updated in the same closed episode. Can any one let me know what could be the issue.

regards

Manjunath R

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...