Splunk IT Service Intelligence

ITSI : Services are not DISPLAYED (- No results found) and Health score not CALCULATED

Path Finder

Hi,
I am having ITSI 411.
and have Configure multiple ITSI deployments to use the same indexing layer.
https://docs.splunk.com/Documentation/ITSI/4.1.1/Configure/DeploymentPlanning

Initially, I had not enabled backfill on KPIs , the services row in the service analyzer was empty. After enabling backfill at service level the service started appearing. that meant enabling backfill populated kpiid=SHKPI-XXX and with attribute isbackfilledevent=1.
backfill at service level is newly introduced in 411
https://docs.splunk.com/Documentation/ITSI/4.1.1/Configure/BackfillSHS

What I understand in general is that servicehealth scores should be computed, why its not computed in 411 which should be of attribute isbackfilledevent=0.

And the behavior of not displaying any services (- No results found) and Health scores ( kpiid=SHKPI-XXX) not computed to summary indexes even for one working before suddenly without any clues in internal logs is worrisome.

Thanks,
Sunil Panda

0 Karma
1 Solution

Path Finder

enable the servicehealthmonitor (report/savedsearch), service health scores should start getting calculate.

View solution in original post

0 Karma

Path Finder

enable the servicehealthmonitor (report/savedsearch), service health scores should start getting calculate.

View solution in original post

0 Karma