Splunk IT Service Intelligence

I want my threshold value to change with time and search result Splunk ITSI

aishwaryabh
New Member

Hi, I am looking for an email in KPI ad-hoc search which is supposed to arrive at -7-15am. if it doesn't arrive at 07:15 i want KPI threshold to go amber and if i don't receive it till 07:45(30 mins later) I want my threshold value to turn red. Only when the email arrives values changes to green.

Any help appreciated. Thanks

Labels (1)
0 Karma

anilchaithu
Builder

you can configure time based KPI thresholds along with base/adhoc search. Please refer this page

https://docs.splunk.com/Documentation/ITSI/4.5.0/SI/TimePolicies

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...