Splunk IT Service Intelligence

Episode review not Displaying Impacted Entities details

shwetas
Explorer

Hi All,

We have brought up Azure monitoring on ITSI and configured KPI alerts to display alerts under Episode review.At present the issue which we have is when we select Episodes in right sides it wont display Impacted entities details.

Did any one faced same issue or any direction on how it can be fix?alt text

0 Karma

merrelr
Path Finder

My Episodes didn't have any "Impacted entities" until I enabled the correlation search "Service Monitoring - Entity Degraded"

0 Karma

gballanti
Explorer

Hello, I have the same issue ... anyone solved ?

0 Karma

pauliushcl
New Member

I'm facing the similar issue. Entities are defined in the service and enabled in the base search.
Entity is found in the KPI base search, but when the notable event is triggered it says no entity impacted.

0 Karma

skoelpin
SplunkTrust
SplunkTrust

I'll ask the obvious question.. Did you enable entities when creating the service/base search? Did you define the entities in your service?

0 Karma

pauliushcl
New Member

I face the same issue:
entities defined in the service and enabled in base search. When looking in the KPI threshold settings entity is presented there. But notable event is triggered it says "No impacted entities"

0 Karma

iatwal
Path Finder

did you ever get an answer to this or figure this out?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...