In Splunk ITSI is it possible to set up alerts for 1 KPI
The single KPI alerting functionality was introduced in version 4.2.0: https://docs.splunk.com/Documentation/ITSI/latest/Configure/KPIalerting