Splunk IT Service Intelligence

Splunk IT Service Intelligence: How do you map the single KPI to Multiple services?

New Member

I have created 500 services in Splunk IT Service Intelligence (ITSI) and mapped the entities and I have created one KPI base search. I want to map this KPI to all 500 services. Anyone please let me know if there is any possible way to assign the kpi to multiple service? or any bulk option available in ITSI.

0 Karma

Splunk Employee
Splunk Employee

Hi Harish, the best way would be to create a a service template containing that KPI base search, and then link all 500 of those services to the service template: https://docs.splunk.com/Documentation/ITSI/latest/Configure/Linkservicetotemplate

You can't bulk link services to templates through the UI, but you can achieve this through the REST API: https://docs.splunk.com/Documentation/ITSI/latest/RESTAPI/ITSIRESTAPIreference#itoa_interface.2Fserv...

Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...