Splunk IT Service Intelligence

Splunk IT Service Intelligence (ITSI) : After removing a service, why is it still showing as a dependent child of another service in the service tree?

ernandofs
Explorer

I removed a service, but it is still showing as a dependent child of another service in the service tree. It appears as "Undefined" instead of its original name. How do you clean this out? The service tree is not showing the correct info in this way. The service tiles work fine.

Regards,

Ernando.

ernandofs
Explorer

We didn't clone the service. We created a new service, removed any dependencies for the initial service and dropped it. Rename the new one. (I.E Create a new service SQL-Server_new, dropped SQL-Server, and rename SQL-Server_new to SQL-Server).

PS: The Splunk support asked us to not clone because the issue could be inherited in the new service.

rcao_splunk
Splunk Employee
Splunk Employee

Got it ! thank you so much Ernando:D

0 Karma

ernandofs
Explorer

Yes, we resolved. We opened a ticket with Splunk. The support person instructed us to create a new service same as the original service and before dropping the original service we had to remove any dependencies for that original service. When we finally dropped the original service with the hanging child services, everything went away.,Yes, we did. I opened a ticket with Splunk. The support person instructed us to create a new service same to the original service were the child services were hanging and to remove any dependency with that original service and drop the original services afterward. When I dropped the original service everything went away and I start to use the new service.

rcao_splunk
Splunk Employee
Splunk Employee

thank you for your reply. Not sure I get it. Base on your screenshot, clone a new SQL-Server Service(call it New_SQL-Server) and remove any dependencies for SQL-Server Service, then remove SQL-Server Service, maybe the undefined service has been dropped. At last rename the New_SQL-Server to SQL-Server. Is that right? Thank you.:)

0 Karma

ernandofs
Explorer

Current Application: IT Service Intelligence
App Version
3.1.3
App Build
4536798501

0 Karma

rcao_splunk
Splunk Employee
Splunk Employee

Hi Ernando, have you solved this problem? Thanks!

0 Karma

kanwu_splunk
Splunk Employee
Splunk Employee

What ITSI version is this?

0 Karma

ernandofs
Explorer

Current Application: IT Service Intelligence
App Version
3.1.3
App Build
4536798501

0 Karma

yannK
Splunk Employee
Splunk Employee

Wait a bit for the Service-healthscores to be udpated, then reload with a shorter timerange, does it still appears ?

0 Karma

ernandofs
Explorer

Thanks for your reply.

We have removed the services over a week ago. We restarted the entire Splunk environment including ITSI and the services removed are still showing as children of another service (they were children before). It looks like that only the name of the services were removed but the dependencies hasn't. The services shows as "Undefined".

Attached is a picture showing the issue.

Regards,

Ernando.alt text

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...