Splunk IT Service Intelligence

How to deal with cumulative data using ITSI?

EricLloyd79
Builder

We have a series of kpis that are accumulated cumulatively. We need to be able to determine the difference between the latest(kpi) of the last 5 mins and the latest(kpi) of the previous 5 mins to determine the increase over the last 5 mins.
Is this possible to do using ITSI?

0 Karma

yannK
Splunk Employee
Splunk Employee

It will be tricky.
I am not sure that KPIs are built for this type of need.

If you have a support contract, maybe open an enhancement request case from the portal.

0 Karma
Get Updates on the Splunk Community!

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...

Reminder! Splunk Love Promo: $25 Visa Gift Card for Your Honest SOAR Review With ...

We recently launched our first Splunk Love Special, and it's gone phenomenally well, so we're doing it again, ...