we currently hold our targets, descriptions and thresholds in an external database. Would it be possible to integrate Splunk IT Service Intelligence (ITSI) KPI thresholds with this database?
Ideally, a user could use our repository front-end and change threshold values and this would replicate automatically (not necessarily real time) on ITSI. Please note this is slightly different from adaptive threshold...
You would have to the use the REST API and have it update the Thresholds from your own watchdog or something like that. It is possible, but you should wait until after 2.6 as the structure will change a little bit. Otherwise you'd have to redo the translation of your external repository data structure to the ITSI data structure.
@robettinger - Did the answer provided by tfletcher help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!
I can think of two methods
- external lookup if its a file
- DBconnect to pull the data from external database and use this as a lookup