Splunk ITSI

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

Hemant1
Explorer

HI team ,

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

can you help us why it is happening and we are using ITSI on-prem .

 

Labels (1)
0 Karma

mahesh_akula
New Member

Hi,

Please verify your indexes.conf whether datatype is missed for index "itsi_summary_metrics". Else try to import indexes from your ITSI SearchHead.

This need to be taken care when you upgrade from 4.4.x to 4.7.x

[itsi_summary_metrics]
homePath = $SPLUNK_DB/itsi_summary_metrics/db
coldPath = $SPLUNK_DB/cold/itsi_summary_metrics/colddb
thawedPath = $SPLUNK_DB/itsi_summary_metrics/thaweddb
datatype=metric

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...