Splunk IT Service Intelligence

How can I get Splunk Add-on for Unix data show up in Splunk IT Service Intelligence (ITSI) dashboards?

hylam
Contributor

The events from the Splunk Add-on for Unix and Linux conforms to CIM. How can I get anything to show in the ITSI dashboards? Thx.

0 Karma

jbailey_splunk
Splunk Employee
Splunk Employee

You can build this in one of two ways in ITSI through KPI's:

1) Use the Data Model option when creating a new KPI, or
2) Use the AdHoc Search option and specifically build your KPI on a search that utilizes your Unix/Linux Add-on data

Hope this helps!

0 Karma

badrinath_itrs
Communicator

Please create a service using configure option in ITSI and select the existing OS data model as KPI . This will add all the OS related KPI to the Service and you can either choose a Glass Table or Service analyzer screen to monitor.

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

the answer depends on the dashboard...

0 Karma

hylam
Contributor

Can u plz give 1 example?

0 Karma

hylam
Contributor

Plz elaborate

0 Karma