@splunk Team, In some cases I want to Skip a specific KPI calculation or Stop it from calculating its next value.
its more like Maintenance mode concept but limited to KPI not at service level?
Example- We had a issue with SPlunk and due to which few of Indexes were not populating due to forwarder issues or data injection . In that Case when we know that issue persist for a while rather than Reducing Importance of KPI that is change to the model , I was wondering if there is any means to stop that?
I dont like the idea to touch my PROD model config( importance for these issues I need way to suppress the alert, I need if we have any other config level thing for this?
Curious to know.
Other EXAMPLE - Any Splunk Injection level failure will impact model calculation , how to handle these?