Splunk ITSI

Entities which are deleted are reoccuring

DataOrg
Builder

I have deleted my entities created but after a day its gets created automatically and throwing duplicate aliases error for daily at a particular time.

once i deleted it i am not able to view the entities but its auto created next day.
I have not a restore option

ERROR:
Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates. 6/7/2019 12.00
Duplicate entity aliases found. This may cause incorrect statistical aggregation results for KPI base searches. Show duplicates. 6/6/2019 12.00

0 Karma

esnyder_splunk
Splunk Employee
Splunk Employee

The steps here show you how to delete entities, and also how to disable recurring import searches on a single instance and search head cluster: https://docs.splunk.com/Documentation/ITSI/latest/Configure/Deleteentities

jaime_ramirez
Communicator

Hi

Do you have any scheduled search for entity aggregation?

You can check in Settings > Data inputs > IT Service Intelligence CSV Import and the Scheduled Time for each Search

Cheers!!!

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...