Splunk IT Service Intelligence

getting actual query behind ITSI entity import searches?

New Member

Hi,

From where can i get actual search query behind ITSI entity import searches?

Labels (2)
0 Karma

Splunk Employee
Splunk Employee

If you go into settings > searches> choose app ITSI and search for the word entity.  You will see custom entity imports that you have done that you scheduled as recurring.  You can see the actual search that shows entities in Settings>lookups>itsi>itsi_entities.

 

 

Tags (1)
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!