Splunk IT Service Intelligence

Splunk ITSI Episodes count for a Service inside the glasstable

inventsekar
SplunkTrust
SplunkTrust

Hi All.., 

Pretty new to ITSI and i have created a GlassTable with KPI Services - CPU, Memory and Disk Utilization. 

new-itsi-disk-cpu.jpg

now i would like to add the number of episodes for the service CPU, but i am not sure how to get the number of episodes for a given service. any ideas, suggestions please. 

 

This below image shows the number of episodes occurred for memory_usage. Here we have grouped the events... so i need this count to be appeared on the glass table. 

new-itsi-episodes.jpg

Labels (2)
0 Karma

eduncan
Splunk Employee
Splunk Employee

You just need to create a KPI inside of each service that counts NEAPS.  Something like this for your KPI search:  

index=itsi_grouped_alerts service_name="Put your service name here"

 

For your split by field you want to use the itsi_group_id

 

For your calculation use distinct count or count.  Then you just drag that KPI to your glass table.

 

inventsekar
SplunkTrust
SplunkTrust

Sure, will try this and update you back. Thanks.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...