Splunk IT Service Intelligence

Max length of KPI Base Search metric title in ITSI

ewan000
Path Finder

I created some base searches with the API with very long metric names derived from statsd metrics.

When I attempted to add these KPIs to a service via the UI I discovered that although the drop-down of the metrics from the base search populates and allows you select one. when you click 'next' you get an error "Metric field is required"

I attempted to edit the KPI base search with the UI to shorten the metric name, but although no error is thrown the UI will ignore the change.

I added a new metric with the name "test" and was able to select and proceed with adding this KPI to a service.

The documentation* doesn't seem to have a schema for the metric array and what information it has doesnt mention any max lengths of fields that i can see.

Is there a max length that I have exceeded, or is it something else about the way I have created the KPI base search?

*https://docs.splunk.com/Documentation/ITSI/4.4.1/RESTAPI/ITSIRESTAPIschema

Labels (2)
0 Karma
1 Solution

ewan000
Path Finder

I found that this is caused by not filling in the _key field on each metric

View solution in original post

0 Karma

ewan000
Path Finder

I found that this is caused by not filling in the _key field on each metric

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...