Splunk IT Service Intelligence

Splunk ITSI Episodes count for a Service inside the glasstable

inventsekar
SplunkTrust
SplunkTrust

Hi All.., 

Pretty new to ITSI and i have created a GlassTable with KPI Services - CPU, Memory and Disk Utilization. 

new-itsi-disk-cpu.jpg

now i would like to add the number of episodes for the service CPU, but i am not sure how to get the number of episodes for a given service. any ideas, suggestions please. 

 

This below image shows the number of episodes occurred for memory_usage. Here we have grouped the events... so i need this count to be appeared on the glass table. 

new-itsi-episodes.jpg

Labels (2)
0 Karma

eduncan
Splunk Employee
Splunk Employee

You just need to create a KPI inside of each service that counts NEAPS.  Something like this for your KPI search:  

index=itsi_grouped_alerts service_name="Put your service name here"

 

For your split by field you want to use the itsi_group_id

 

For your calculation use distinct count or count.  Then you just drag that KPI to your glass table.

 

inventsekar
SplunkTrust
SplunkTrust

Sure, will try this and update you back. Thanks.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...