Splunk ITSI

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

Hemant1
Explorer

HI team ,

Default analyzer showing grey in tree view and NO results in GRID view .Although KPI and service is working fine.

can you help us why it is happening and we are using ITSI on-prem .

 

Labels (1)
0 Karma

mahesh_akula
New Member

Hi,

Please verify your indexes.conf whether datatype is missed for index "itsi_summary_metrics". Else try to import indexes from your ITSI SearchHead.

This need to be taken care when you upgrade from 4.4.x to 4.7.x

[itsi_summary_metrics]
homePath = $SPLUNK_DB/itsi_summary_metrics/db
coldPath = $SPLUNK_DB/cold/itsi_summary_metrics/colddb
thawedPath = $SPLUNK_DB/itsi_summary_metrics/thaweddb
datatype=metric

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...