Splunk ITSI

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

Hemant1
Explorer

HI team ,

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

can you help us why it is happening and we are using ITSI on-prem .

 

Labels (1)
0 Karma

mahesh_akula
New Member

Hi,

Please verify your indexes.conf whether datatype is missed for index "itsi_summary_metrics". Else try to import indexes from your ITSI SearchHead.

This need to be taken care when you upgrade from 4.4.x to 4.7.x

[itsi_summary_metrics]
homePath = $SPLUNK_DB/itsi_summary_metrics/db
coldPath = $SPLUNK_DB/cold/itsi_summary_metrics/colddb
thawedPath = $SPLUNK_DB/itsi_summary_metrics/thaweddb
datatype=metric

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...