Splunk ITSI

Deletion of ITSI entities and Services-If I delete the services directly , does it remove all the associated entities ?

Poojitha
Path Finder

Hi All,

I want to delete few services and its entities from splunk ITSI search head. If I delete the services directly , does it remove all the associated entities ? 

Regards,
PNV

Labels (1)
0 Karma

srauhala_splunk
Splunk Employee
Splunk Employee

No deleting service in ITSI does not affect the entities. In your case I would: 
* identify what filters are used to filter entities to the services you are to delete.
* Use the entity management view to verify if these entities used in any other services? If yes, do you really want to delete them? If no select and delete them from the entity management UI. Preferably before deleting the service so you can verify in the service that the entities now are gone. 

Also note that if these entities and or services are created by a scheduled job, they might reappear when those jobs are run again. 

/Seb

0 Karma
Get Updates on the Splunk Community!

New Case Study Shows the Value of Partnering with Splunk Academic Alliance

The University of Nevada, Las Vegas (UNLV) is another premier research institution helping to shape the next ...

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...