Splunk IT Service Intelligence

Splunk query to get the threshold values of different KPI's in ITSI.

Kumar23
Loves-to-Learn
 
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust
What is your question?
---
If this reply helps you, Karma would be appreciated.
0 Karma

Kumar23
Loves-to-Learn

Hi @richgalloway did you understand my query? Please let me know for any further information.

 

Thanks,

Kumar23

0 Karma

richgalloway
SplunkTrust
SplunkTrust
No, I don't, but I replied only because your posting was empty.
eduncan has suggested a solution. I suggest you consider it.
---
If this reply helps you, Karma would be appreciated.
0 Karma

Kumar23
Loves-to-Learn

We will set the threshold values  for KPI's like High, Medium, Normal in ITSI right. I need  a query to get   that threshold values  for various KPI's.

0 Karma

eduncan
Splunk Employee
Splunk Employee

You can use this content pack:https://docs.splunk.com/Documentation/ITSICP/current/Config/AboutMA and it has corr searches that bring back KPI status.  You can use these as your starting point.  It will not tell you what the threshold is, rather if it is passed.  You don't need to pull the threshold setting you need to pull whether it has passed the threshold and then you can alert on it.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...