Splunk IT Service Intelligence

getting actual query behind ITSI entity import searches?

jdeep607
New Member

Hi,

From where can i get actual search query behind ITSI entity import searches?

Labels (2)
0 Karma

eduncan
Splunk Employee
Splunk Employee

If you go into settings > searches> choose app ITSI and search for the word entity.  You will see custom entity imports that you have done that you scheduled as recurring.  You can see the actual search that shows entities in Settings>lookups>itsi>itsi_entities.

 

 

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...