Splunk IT Service Intelligence

How can I get Splunk Add-on for Unix data show up in Splunk IT Service Intelligence (ITSI) dashboards?

hylam
Contributor

The events from the Splunk Add-on for Unix and Linux conforms to CIM. How can I get anything to show in the ITSI dashboards? Thx.

0 Karma

jbailey_splunk
Splunk Employee
Splunk Employee

You can build this in one of two ways in ITSI through KPI's:

1) Use the Data Model option when creating a new KPI, or
2) Use the AdHoc Search option and specifically build your KPI on a search that utilizes your Unix/Linux Add-on data

Hope this helps!

0 Karma

badrinath_itrs
Communicator

Please create a service using configure option in ITSI and select the existing OS data model as KPI . This will add all the OS related KPI to the Service and you can either choose a Glass Table or Service analyzer screen to monitor.

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

the answer depends on the dashboard...

0 Karma

hylam
Contributor

Can u plz give 1 example?

0 Karma

hylam
Contributor

Plz elaborate

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...