Splunk IT Service Intelligence

Why does Splunk ITSI Web Server search no results?

batabay
Path Finder

Hi, splunkers

I am just wonder this phase. But it's not critical for me now.
I try to integrate apache web server and splunk itsi. But I stuck in creating services phase because | savedsearch DA-ITSI-WEBSERVER-WebServer_Entity_Search is not giving result.

batabay_0-1669031292819.png

 

Actually my real question is about KPI searches.
I want to show Website 4xx erros in default services page but in Website-4xx Errors search includes tag=activity, so I don't find these tag any add-on. For these reason My web site 4xx error search not working properly.

How I fix these issue ?

batabay_1-1669031302413.png

Also these tag not including in Splunk ITSI content pack.

 

batabay_3-1669031524472.png

 

Thank you.

batabay_2-1669031398321.png

 

0 Karma

skramp
SplunkTrust
SplunkTrust

So please try to figure out if your source, field extractions and permissions are correct. This must be working before creating KPIs.

0 Karma

batabay
Path Finder

Everythings is correct. Also I get logs properly. I installed apps necessary.

Which add-ons must for integrate apache and splunk itsi.

0 Karma
Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...