Splunk IT Service Intelligence
Highlighted

repeatative of splunk web messages after deleting

Builder

I am using ITSI enterprise and i am getting web messages after deleting also.
the messages is also not current messages which is older messages.

0 Karma
Highlighted

Re: repeatative of splunk web messages after deleting

Motivator

Can you tell what messages are those?

0 Karma
Highlighted

Re: repeatative of splunk web messages after deleting

Builder

1.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.
2.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.
3.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.
4.Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates.

with older dates and time
every day messages count increasing

0 Karma
Highlighted

Re: repeatative of splunk web messages after deleting

SplunkTrust
SplunkTrust

what are the duplicates ? Show duplicates.

0 Karma
Highlighted

Re: repeatative of splunk web messages after deleting

Motivator

@premranjithj,

You are getting "Duplicate entity aliases found" message, which means some entities has same alias. It is showing messages with old timestamp as this message generated when ITSI first time found entity alias which has already available in same Service. But those entities is still exist and same issue is available so it is showing messages with old timestamp.

Hope this helps!!

Highlighted

Re: repeatative of splunk web messages after deleting

Builder

i have deleted the entities which causing this alert but it getting created on the next day. i have not restore it

0 Karma