Splunk ITSI

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

Hemant1
Explorer

HI team ,

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

can you help us why it is happening and we are using ITSI on-prem .

 

Labels (1)
0 Karma

mahesh_akula
New Member

Hi,

Please verify your indexes.conf whether datatype is missed for index "itsi_summary_metrics". Else try to import indexes from your ITSI SearchHead.

This need to be taken care when you upgrade from 4.4.x to 4.7.x

[itsi_summary_metrics]
homePath = $SPLUNK_DB/itsi_summary_metrics/db
coldPath = $SPLUNK_DB/cold/itsi_summary_metrics/colddb
thawedPath = $SPLUNK_DB/itsi_summary_metrics/thaweddb
datatype=metric

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...