Splunk IT Service Intelligence

How to get the Service health score via rest API in ITSI?

rhirasin
Engager

Hello Everyone,

Our requirement is to fetch/download the Service health score via rest API.

we are in splunk cloud as of now.

Thank you

 

Labels (3)
0 Karma

Siddharth
Path Finder

Hi   

A very simple approach is your KPI and service health score resides in index=itsi_summary so you can use splunk API's which we use run a search and that can solve your problem 

In below code write this query  index="itsi_summary" service_name="Splunk" | table alert_value _time   here in plave of search *  searchquery_oneshot = "search * | head 10


https://dev.splunk.com/enterprise/docs/devtools/python/sdk-python/howtousesplunkpython/howtorunsearc...


sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "lib"))
import splunklib.results as results

...

# Run a one-shot search and display the results using the results reader

# Set the parameters for the search:
# - Search everything in a 24-hour time range starting June 19, 12:00pm
# - Display the first 10 results
kwargs_oneshot = {"earliest_time": "2014-06-19T12:00:00.000-07:00",
                  "latest_time": "2014-06-20T12:00:00.000-07:00",
                  "output_mode": 'json'}
searchquery_oneshot = "search * | head 10"

oneshotsearch_results = service.jobs.oneshot(searchquery_oneshot, **kwargs_oneshot)

# Get the results and display them using the JSONResultsReader
reader = results.JSONResultsReader(oneshotsearch_results)
for item in reader:
    print(item)

please do upvote if it helps 


@rhirasin

0 Karma

semen_l
Engager

Hi everyone,

Please advise is it possible to GET a particular service Health score with a simple Rest API call (for example using a Postman app)?

Tried to find it in https://docs.splunk.com/Documentation/ITSI/4.17.0/RESTAPI/ITSIRESTAPIreference#ITOA_Interface but no success.

0 Karma
Get Updates on the Splunk Community!

Everything Community at .conf24!

You may have seen mention of the .conf Community Zone 'round these parts and found yourself wondering what ...

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...