Splunk IT Service Intelligence

ITSI summary

Loves-to-Learn Lots

what is the reason when we change the adhoc search of a KPI to base search, the logs in index=itsi_summary shows that the KPI is using both the searches ( adhoc as well as base search) even after the adhoc search has been deleted from the KPI in splunk itsi.

Labels (2)
Tags (1)
0 Karma

Splunk Employee
Splunk Employee

This KPI should be removed from the base search. I suggest filing a support ticket.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!