Splunk IT Service Intelligence

How do I access the data in the maintenance_calendar KV Store for ITSI?

andrewtrobec
Motivator

Hello!

According to ITSI documentation (https://docs.splunk.com/Documentation/ITSI/4.17.1/Configure/KVPerms) there is a KV store called "maintenance_calendar" that contains maintenance window details.

I need to run some searches on the schedules, but I cannot access the data in the KV store due to the error: 

andrewtrobec_0-1697019510948.png

Is it possible to achieve what I am looking to do? 

Thank you and best regards,

Andrew

Tags (2)
0 Karma
1 Solution

anatolvd
Splunk Employee
Splunk Employee

Hey @andrewtrobec , while the collection name is indeed maintenance_calendar, the lookup definition name is itsi_maintenance_calendar, so give that a try instead. I suspect you will have to play around with the Supported fields for the schedules themselves to come up.

Let me know if this helps,

avd

View solution in original post

andrewtrobec
Motivator

@anatolvd  This gets the job done, I didn't think of that! Thank you!

0 Karma

anatolvd
Splunk Employee
Splunk Employee

Hey @andrewtrobec , while the collection name is indeed maintenance_calendar, the lookup definition name is itsi_maintenance_calendar, so give that a try instead. I suspect you will have to play around with the Supported fields for the schedules themselves to come up.

Let me know if this helps,

avd

Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...