Splunk IT Service Intelligence

Muliple JAVA process on ITSI server


I have dedicated serach head for ITSI on windows OS. I have ITSI version 4.0.4 and I have installed Java SE Development Kit 8. But when itry to create notable event aggregation policies then multiple java instance are running which in turn CPU utilization goes to 100.
so what can be issue due to which multiple java process are running?
I would appreciate any ideas?
it seems hardware is enough but not understand about multiple java instance..

0 Karma

New Member

That Java processes are created by rules engine
rules engine is used by grouping policy
In this case we have to go to the scheduled search and there we have ITSI_Event_grouping
we need to kill this job so it will again restart the job then our CPU comes down

0 Karma


You probably don't want to hear this, but you should run it on *nix. I would recommend opening a support case

0 Karma
Get Updates on the Splunk Community!

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...