Splunk IT Service Intelligence

ITSI : Entity Alias Filtering will be removed in a future release

Path Finder

When we are editing base searches we get the warning:

“Entity Alias Filtering will be removed in a future release”

The help link doesn’t take you anywhere with any information on this and we are relying heavily on entity filtering.

What’s the plans in the space and how should we prepare for them?

ITSI v4.1.1

Splunk Employee
Splunk Employee

Hi ewan000

I found the link to the documentation that you were looking for https://docs.splunk.com/Documentation/ITSI/4.1.0/ReleaseNotes/Removedfeatures#Entity_Alias_Filtering... . In terms of getting the KPI to filter for specific entities you would just need to set it up a bit differently.

You can find more information around the removed feature here in Splunk's ITSI documentation.

Hope that helps.


Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...