Entity rules in Service Template is not working.

Splunk ITSI

Hi Team,

I have a service template with the KPI search as below:
search Id="*" Environment=Production Status=Active | fields Id

In the entity rules i have Id=100, so that i will get the results only for Id=100.

But the service is returning the results containing all Id.

Get Updates on the Splunk Community!

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...

Are you a member of the Splunk Community?