Splunk IT Service Intelligence

Why does Splunk ITSI Web Server search no results?

batabay
Path Finder

Hi, splunkers

I am just wonder this phase. But it's not critical for me now.
I try to integrate apache web server and splunk itsi. But I stuck in creating services phase because | savedsearch DA-ITSI-WEBSERVER-WebServer_Entity_Search is not giving result.

batabay_0-1669031292819.png

 

Actually my real question is about KPI searches.
I want to show Website 4xx erros in default services page but in Website-4xx Errors search includes tag=activity, so I don't find these tag any add-on. For these reason My web site 4xx error search not working properly.

How I fix these issue ?

batabay_1-1669031302413.png

Also these tag not including in Splunk ITSI content pack.

 

batabay_3-1669031524472.png

 

Thank you.

batabay_2-1669031398321.png

 

0 Karma

skramp
SplunkTrust
SplunkTrust

So please try to figure out if your source, field extractions and permissions are correct. This must be working before creating KPIs.

0 Karma

batabay
Path Finder

Everythings is correct. Also I get logs properly. I installed apps necessary.

Which add-ons must for integrate apache and splunk itsi.

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...